I built secure AWS infrastructure with Terraform, applying least-privilege IAM, secure VPC networking, EC2 controls, and encrypted S3 storage.
I configured CloudTrail, CloudWatch, and SNS for security monitoring and unauthorized API alerts, and added Terraform validation and security scanning through GitHub Actions. I documented and maintained the infrastructure code in GitHub.

