IDENTITY // CLOUD INFRASTRUCTURE & SYSTEMS

LOC: JAKARTA · STATUS: READY FOR HIRE

CLOUD SYSTEMS ENGINEER // AWS · LINUX · IAC

Ferdian Hanif

I build and manage AWS cloud systems. I keep servers running, scale them automatically when traffic spikes, and automate routine tasks with Linux and Python.

Computer Engineering graduate from Universitas Andalas. Experienced in physical network operations at PT Semen Padang, automated AWS cloud setups, and Linux systems administration.

DEGREE: B.Eng Computer Engineering

OPS: PT Semen Padang

LOC: Jakarta, ID

VIEW ARCHITECTURES DOWNLOAD CV

cloud-shell // aws-cli

> aws sts get-caller-identity

{

"UserId": "AROA49J87V7EXAMPLE:ferdian",

"Account": "VERIFIED_ENGINEER",

"Arn": "arn:aws:iam::cloud:role/InfrastructureEngineer"

}

> aws cloudformation describe-stacks --query "Stacks[].StackStatus"

[ "CREATE_COMPLETE", "UPDATE_COMPLETE" ]

REGION: ap-southeast-1 (Singapore) MFA ENFORCED

Verified Builds

Dual-AZ

High Availability

< 3s

Event Detection

FEATURED CLOUD ARCHITECTURES // PROJECTS

AWS IMPLEMENTATIONS

FEATURED PROJECT 01 // MULTI-TIER RESILIENT CLOUD ARCHITECTURE

PRODUCTION SPEC

AWS HIGH-AVAILABILITY SYSTEM

Resilient Multi-Tier Cloud Architecture

Dual-AZ Fault-Tolerant Web and Database Topology

GOAL & SCENARIO

Keep a web application online 24/7 across two AWS data centers without single-point-of-failure risks.

HOW IT WORKS

Traffic enters through an Application Load Balancer. Compute nodes scale on demand in private subnets. The database syncs in real-time to an automatic standby replica.

RESILIENCE TEST RESULTS VERIFIED LOGS

Primary DB Crash Test: Simulated a database outage. Standby replica took over in 52 seconds with zero data loss.

Traffic Spike Test: Triggered 75% CPU load. Auto-scaling launched a healthy new server in 84 seconds.

FINOPS & RESOURCE EFFICIENCY < $15/MO RUNTIME

Automated off-hours shutdown scripts and right-sized instances to keep operational costs under $15 per month.

TECHNOLOGIES & TOOLS:

AWS VPC ALB EC2 Auto Scaling Amazon RDS Multi-AZ NAT Gateway CloudWatch Python Boto3 Bash

TOPOLOGY // DUAL-AZ VPC INFRASTRUCTURE ap-southeast-1

Active Compute Node

Primary Multi-AZ DB

BENCHMARK: SUB-60s AUTOMATIC DB FAILOVER WITH ZERO DATA LOSS

INSPECT MONOREPO SPEC

FEATURED PROJECT 02 // AUTONOMOUS AI AGENT & ZERO-TRUST GATEWAY

ZERO-TRUST & AI INFRA

AWS LIGHTSAIL & AI GATEWAY

Autonomous AI Agent on AWS Lightsail

Zero-Trust Mesh Network, Multi-LLM Gateway and Telegram Daemon

GOAL & SCENARIO

Run an autonomous AI task runner 24/7 on an inexpensive VPS without opening web ports to the public internet.

HOW IT WORKS

The AWS firewall blocks public traffic. Admin dashboards are reached via an encrypted Tailscale WireGuard mesh tunnel. Tasks are sent through Telegram using outbound HTTPS polling.

OPERATIONAL HIGHLIGHTS & TROUBLESHOOTING LIVE VERIFIED

Hairpin NAT Reflection Fix: Closing external ports caused public IP calls to time out. Fixed by pointing agent traffic directly to localhost loopback 127.0.0.1.

Reliability & Resource Tuning: Configured 2 GB swap to prevent OOM kernel kills. Enabled systemd user lingering to keep the agent daemon alive across reboots.

FINOPS & RUNTIME COST $12/MO FLAT PREDICTABLE

Flat $12/month Lightsail instance with 3 TB transfer. Free-tier LLM pooling via OmniRoute with automatic rate-limit fallback keeps AI inference cost at $0.

TECHNOLOGIES & TOOLS:

AWS Lightsail Ubuntu Linux Docker Tailscale WireGuard Hermes Agent OmniRoute Telegram Bot API Systemd

TOPOLOGY // ZERO-TRUST AI ARCHITECTURE

Tailscale WireGuard Mesh Tunnel

Hermes Autonomous Agent Daemon

STATUS: 24/7 AUTONOMOUS SYSTEMD DAEMON ON AWS LIGHTSAIL

INSPECT GITHUB REPO

FEATURED PROJECT 03 // SERVERLESS EVENT-DRIVEN AUDIT PIPELINE

SECURITY AUTOMATION

EVENT-DRIVEN CLOUD GOVERNANCE

Serverless Security and Audit Engine

Automated Ingress Drift Detection and Rollback

THREAT SCENARIO

Opening port 22 (SSH) to 0.0.0.0/0 exposes servers to public attacks. Manual audits are too slow, so security enforcement must run in seconds.

SOLUTION

CloudTrail captures changes, EventBridge catches the event, and a Python Lambda function revokes the rule and alerts the team via SMS and email.

INCIDENT DRILL TIMELINE TOTAL: 2.85s

T+0.00s Security Group mutated (Port 22 opened to 0.0.0.0/0).

T+0.85s CloudTrail records the API management event.

T+1.40s EventBridge rule triggers Lambda function.

T+2.10s Lambda revokes unauthorized ingress rule.

T+2.85s SNS dispatches incident alert with user ID and origin IP.

TECHNOLOGIES & TOOLS:

AWS Lambda (Python) Amazon EventBridge AWS CloudTrail Amazon SNS IAM Least-Privilege Python Boto3

EVENT FLOW // DRIFT DETECTION PIPELINE EVENT-DRIVEN

Event Ingestion & Alerting

Lambda Execution Engine

RESPONSE TIME: 2.85s DISCOVERY TO QUARANTINE LATENCY

INSPECT PIPELINE CODE

TECHNICAL STACK & SYSTEMS COMPETENCIES

HANDS-ON TOOLING

STACK // CLOUD PLATFORM PRIMARY

AWS Core Infrastructure

VPC networking, compute instances, relational databases, and IAM security policies.

Amazon VPC Amazon EC2 Amazon S3 Amazon RDS Multi-AZ AWS IAM Amazon CloudWatch AWS CloudTrail Systems Manager (SSM) AWS Lambda Amazon SNS Amazon EventBridge

STACK // OPERATING SYSTEMS & NETWORKS CORE

Systems & Linux Administration

Linux server administration, automated bash scripting, and network diagnostics.

Linux (Ubuntu / Amazon Linux) Bash Shell Scripting System Hardening Patch Manager TCP/IP & Subnetting DNS / Route Tables VPC Flow Logs Fiber Optics (VFL)

STACK // AUTOMATION & PIPELINES AUTOMATION

IaC & CI/CD Automation

Declarative infrastructure as code, CI/CD automation pipelines, and cloud SDKs.

AWS CloudFormation Terraform / OpenTofu GitHub Actions CI/CD Python Boto3 SDK Git Monorepos Docker Containers REST APIs Cloud-Init Automation

STACK // DATA & HARDWARE DATA & SYSTEMS

Data & Systems Diagnostics

Database queries, structured log analytics, and physical hardware diagnostics.

PostgreSQL SQL (Athena / RDS) Python Pandas Network Cabling (RJ45/LAN) ESP32 Microcontrollers Structured Log Analytics

Foundation: Connecting physical network operations from PT Semen Padang to automated cloud infrastructure.

ALL SKILLS CODE-BACKED

AWS INFRASTRUCTURE CAPABILITY MATRIX // 50 VERIFIED BUILDS

8 DOMAINS AUDITED

AWS Infrastructure Capability Matrix

50 hands-on AWS builds covering networking, servers, databases, security, and automation. Search by keyword or filter by domain.

Showing 6 of 50 builds

Monorepo: github.com/ferdianhanif/aws-cloud-engineering-labs

ID	Build Specification	Category	AWS Services	Scope & Objective	Monorepo
AWS-01	Cloud Sandbox Environment Initialization	Cloud Essentials	AWS IAM CloudShell VPC	Baseline environment configuration and root security verification.	CODE
AWS-02	Amazon EC2 Web Server Lifecycle Management	Compute & OS	Amazon EC2 Security Groups User Data	Bootstrap Apache HTTP web server deployment via shell automation scripts.	CODE
AWS-03	IP Networking & Troubleshooting Commands	VPC & Networking	Linux CLI TCP/IP DNS	Diagnostics of network latency and routing via ping, traceroute, and dig.	CODE
AWS-04	Public & Private IP Address Diagnostics	VPC & Networking	Amazon VPC CIDR Subnets	Network addressing verification and private subnet segmentation.	CODE
AWS-05	Static and Dynamic Elastic IP Architecture	VPC & Networking	Amazon EC2 Elastic IP DNS	Configuring static public IPv4 persistence across instance lifecycle restarts.	CODE
AWS-06	L3/L4 Network Issue Troubleshooting	VPC & Networking	Route Tables Security Groups NACL	Root cause analysis of dropped packets across route tables and security filters.	CODE
AWS-07	Subnet Architecture in Amazon VPC	VPC & Networking	Amazon VPC Subnets Availability Zones	Designing dual-AZ isolated public and private subnet topologies.	CODE
AWS-08	VPC Gateway & Routing Infrastructure	VPC & Networking	Internet Gateway Route Tables VPC	Orchestrating internet breakout for compute instances in public subnets.	CODE
AWS-09	End-to-End VPC Build & Production Web Server	VPC & Networking	Amazon VPC Amazon EC2 Security Groups	End-to-end custom VPC construction hosting a live production web service.	CODE
AWS-10	Database Schema & Table Operations	Database & Data	Relational DB SQL DDL	Structured relational schema definitions and table partitioning.	CODE
AWS-11	Transactional DML Database Operations	Database & Data	SQL DML ACID Compliance	Optimized INSERT, UPDATE, and DELETE operations under transactional integrity.	CODE
AWS-12	Complex Query Formulation & Optimization	Database & Data	SQL DQL Query Optimization	Performance-tuned JOIN operations and high-volume data selection.	CODE
AWS-13	Conditional Data Filtering & Indexing	Database & Data	SQL Filtering Data Indexing	High-efficiency WHERE predicate filtering and compound index usage.	CODE
AWS-14	Aggregate Functions & Analytics Processing	Database & Data	SQL Analytics Aggregations	Statistical transformation and window functions for analytical reporting.	CODE
AWS-15	Data Organization & Grouping Strategies	Database & Data	SQL Grouping HAVING Filters	Multi-dimensional categorical groupings and summarized dataset generation.	CODE
AWS-16	Database Server Build & Application Integration	Database & Data	Amazon RDS PHP Application EC2	Decoupling application tier compute from managed relational database tier.	CODE
AWS-17	Amazon Aurora Distributed Database Cluster	Database & Data	Amazon Aurora Storage Engine Read Replicas	Deploying high-performance fault-tolerant Aurora storage clusters.	CODE
AWS-18	Amazon DynamoDB NoSQL Low-Latency Storage	Database & Data	Amazon DynamoDB NoSQL Partition Keys	Single-digit millisecond query performance with global partition key schema.	CODE
AWS-19	Challenge: Autonomous Database Tier Deployment	Database & Data	Amazon RDS CLI Automation Security Groups	Zero-guidance challenge provisioning relational backend tied to dynamic frontend.	CODE
AWS-20	Systems Hardening via AWS Systems Manager Patch Manager	Security & Governance	AWS Systems Manager Patch Baselines Linux	Automated fleet OS patching and vulnerability remediation without SSH.	CODE
AWS-21	Data-at-Rest & In-Transit Encryption via AWS KMS	Security & Governance	AWS KMS Customer Managed Keys EBS Encryption	Envelope encryption implementation and cryptographic key rotation policies.	CODE
AWS-22	Enterprise Identity & Access Management (IAM)	Security & Governance	AWS IAM RBAC Least Privilege	Fine-grained least-privilege policy authoring and role delegation.	CODE
AWS-23	Malware Protection via AWS Network Firewall	Security & Governance	AWS Network Firewall Suricata Rules VPC	Stateful packet inspection and domain filtering to prevent outbound exfiltration.	CODE
AWS-24	Compute Health Monitoring & CloudWatch Alarms	Observability & Monitoring	Amazon CloudWatch Amazon SNS Amazon EC2	Automated alarm triggers and email notification dispatches on CPU threshold breach.	CODE
AWS-25	AWS CLI Tooling Automation & Credential Security	IaC & Automation	AWS CLI IAM Credentials Bash	Programmatic cloud infrastructure management with secured credential profiles.	CODE
AWS-26	Fleet Management via SSM Run Command & Session Manager	Compute & OS	AWS Systems Manager Session Manager IAM	Secure bastionless shell access and bulk script execution across instances.	CODE
AWS-27	Amazon S3 Static Website & CLI Sync Pipelines	Storage & DR	Amazon S3 AWS CLI Bucket Policies	Static content delivery with granular public read bucket policies.	CODE
AWS-28	Automated EC2 Provisioning via AWS CLI Automation	Compute & OS	Amazon EC2 AWS CLI Shell Scripting	Scripted deployment of customized compute instances with automated tags.	CODE
AWS-29	Challenge: Autonomous EC2 Instance Exercise	Compute & OS	Amazon EC2 Security Groups Linux CLI	Autonomous specification matching and isolated compute node provisioning.	CODE
AWS-30	Instance Creation Troubleshooting & RCA	Compute & OS	Amazon EC2 AMI Instance Types	Diagnosing failure modes across AMI architectural mismatches and quotas.	CODE
AWS-31	Scale & Load Balance Multi-Tier Architecture	Compute & High Availability	Application Load Balancer Target Groups EC2	Traffic distribution across dual Availability Zones via Application Load Balancer.	CODE
AWS-32	Dynamic EC2 Auto Scaling Under Workload Spikes	Compute & High Availability	Auto Scaling Groups CloudWatch Launch Templates	Automated horizontal scaling elasticity based on real-time metric thresholds.	CODE
AWS-33	Amazon Route 53 Health Checks & Failover Routing	VPC & Networking	Amazon Route 53 DNS Failover Health Checks	Automated DNS failover routing directing traffic away from impaired origins.	CODE
AWS-34	Event-Driven Serverless Compute via AWS Lambda	Serverless & Compute	AWS Lambda Python CloudWatch Logs	Stateless serverless function execution triggered by Amazon S3 object events.	CODE
AWS-35	Challenge: Autonomous Serverless Lambda Orchestration	Serverless & Compute	AWS Lambda IAM Roles Python	Autonomous build of event-driven image processing functions without servers.	CODE
AWS-36	Live Database Migration to Amazon RDS for MariaDB	Database & Data	Amazon RDS MariaDB mysqldump	Zero-data-loss relational database export/import migration to managed RDS.	CODE
AWS-37	Complex Multi-Tier Amazon VPC Configuration	VPC & Networking	Amazon VPC NAT Gateway Route Tables	Enterprise network topology with isolated private database subnets and NAT.	CODE
AWS-38	Storage Lifecycle Automation & S3 Versioning DR	Storage & DR	Amazon S3 Amazon EBS Python Boto3	Cron-scheduled automated EBS snapshot lifecycle pruning and S3 object recovery.	CODE
AWS-39	VPC Flow Logs Forensic Analysis & L3/L4 Network Triage	VPC & Networking	VPC Flow Logs Amazon Athena Security Groups	Forensic log analysis resolving L3 default route outages and L4 NACL blocks.	CODE
AWS-40	Amazon EBS Block Storage & Disaster Recovery	Storage & DR	Amazon EBS EBS Snapshots Linux fstab	Volume formatting, fstab persistence, snapshotting, and point-in-time DR restoration.	CODE
AWS-41	Amazon S3 Event Notifications & IAM Prefix Delegation	Storage & DR	Amazon S3 Amazon SNS IAM Policies	Event notifications wired to SNS with prefix-level IAM access segregation.	CODE
AWS-42	Challenge: Granular Object ACL Security & Public Hosting	Storage & DR	Amazon S3 S3 Block Public Access AWS CLI	Decoupling bucket-level BPA to enforce object-level ACL public reads.	CODE
AWS-43	Enterprise Observability with CloudWatch Agent & AWS Config	Observability & Monitoring	CloudWatch Agent EventBridge AWS Config	SSM-deployed CloudWatch agents, log filter alarms, and AWS Config compliance rules.	CODE
AWS-44	CloudTrail Multi-Region Audit & Athena Security Forensics	Security & Governance	AWS CloudTrail Amazon Athena AWS KMS	Forensic triage identifying rogue IAM threat actors and remediating attack vectors.	CODE
AWS-45	FinOps Resource Governance with Tagging & The Stopinator	IaC & Automation	AWS CLI JMESPath Boto3/PHP SDK FinOps	Dynamic compute discovery, automated off-hours shutdown, and tag enforcement.	CODE
AWS-46	Rightsizing Compute Optimization & TCO Modeling	IaC & Automation	AWS CLI Amazon RDS AWS Pricing Calculator	Monolith database decoupling and vertical compute rightsizing cutting costs by 50%.	CODE
AWS-47	Declarative Infrastructure as Code with AWS CloudFormation	IaC & Automation	AWS CloudFormation SSM Parameter Store S3	Automated multi-tier stack deployment using YAML templates and dynamic parameters.	CODE
AWS-48	CloudFormation Deployment Troubleshooting & Drift Detection	IaC & Automation	AWS CloudFormation Drift Detection cloud-init	Root cause analysis on cloud-init failure logs, stack drift audit, and retain teardown.	CODE
AWS-49	Challenge: Autonomous CloudFormation Isolated VPC & Compute	IaC & Automation	AWS CloudFormation Amazon VPC EC2	Autonomous authoring of production YAML stacks with private subnet compute nodes.	CODE
AWS-50	Amazon SageMaker Machine Learning Container Pipeline	Machine Learning & AI	Amazon SageMaker XGBoost Amazon S3	Data partitioning, containerized model training, and artifact storage on S3.	CODE

AWS-01 Cloud Essentials

Cloud Sandbox Environment Initialization

Baseline environment configuration and root security verification.

AWS IAM CloudShell VPC

VIEW IN REPO

AWS-02 Compute & OS

Amazon EC2 Web Server Lifecycle Management

Bootstrap Apache HTTP web server deployment via shell automation scripts.

Amazon EC2 Security Groups User Data

VIEW IN REPO

AWS-03 VPC & Networking

IP Networking & Troubleshooting Commands

Diagnostics of network latency and routing via ping, traceroute, and dig.

Linux CLI TCP/IP DNS

VIEW IN REPO

AWS-04 VPC & Networking

Public & Private IP Address Diagnostics

Network addressing verification and private subnet segmentation.

Amazon VPC CIDR Subnets

VIEW IN REPO

AWS-05 VPC & Networking

Static and Dynamic Elastic IP Architecture

Configuring static public IPv4 persistence across instance lifecycle restarts.

Amazon EC2 Elastic IP DNS

VIEW IN REPO

AWS-06 VPC & Networking

L3/L4 Network Issue Troubleshooting

Root cause analysis of dropped packets across route tables and security filters.

Route Tables Security Groups NACL

VIEW IN REPO

CURATED MATRIX: Showing 6 featured builds

Ferdian Hanif

FEATURED CLOUD ARCHITECTURES // PROJECTS

Resilient Multi-Tier Cloud Architecture

Autonomous AI Agent on AWS Lightsail

Serverless Security and Audit Engine

AWS Core Infrastructure

Systems & Linux Administration

IaC & CI/CD Automation

Data & Systems Diagnostics

AWS Infrastructure Capability Matrix

Cloud Sandbox Environment Initialization

Amazon EC2 Web Server Lifecycle Management

IP Networking & Troubleshooting Commands

Public & Private IP Address Diagnostics

Static and Dynamic Elastic IP Architecture

L3/L4 Network Issue Troubleshooting

Subnet Architecture in Amazon VPC

VPC Gateway & Routing Infrastructure

End-to-End VPC Build & Production Web Server

Database Schema & Table Operations

Transactional DML Database Operations

Complex Query Formulation & Optimization

Conditional Data Filtering & Indexing

Aggregate Functions & Analytics Processing

Data Organization & Grouping Strategies

Database Server Build & Application Integration

Amazon Aurora Distributed Database Cluster

Amazon DynamoDB NoSQL Low-Latency Storage

Challenge: Autonomous Database Tier Deployment

Systems Hardening via AWS Systems Manager Patch Manager

Data-at-Rest & In-Transit Encryption via AWS KMS

Enterprise Identity & Access Management (IAM)

Malware Protection via AWS Network Firewall

Compute Health Monitoring & CloudWatch Alarms

AWS CLI Tooling Automation & Credential Security

Fleet Management via SSM Run Command & Session Manager

Amazon S3 Static Website & CLI Sync Pipelines

Automated EC2 Provisioning via AWS CLI Automation

Challenge: Autonomous EC2 Instance Exercise

Instance Creation Troubleshooting & RCA

Scale & Load Balance Multi-Tier Architecture

Dynamic EC2 Auto Scaling Under Workload Spikes

Amazon Route 53 Health Checks & Failover Routing

Event-Driven Serverless Compute via AWS Lambda

Challenge: Autonomous Serverless Lambda Orchestration

Live Database Migration to Amazon RDS for MariaDB

Complex Multi-Tier Amazon VPC Configuration

Storage Lifecycle Automation & S3 Versioning DR

VPC Flow Logs Forensic Analysis & L3/L4 Network Triage

Amazon EBS Block Storage & Disaster Recovery

Amazon S3 Event Notifications & IAM Prefix Delegation

Challenge: Granular Object ACL Security & Public Hosting

Enterprise Observability with CloudWatch Agent & AWS Config

CloudTrail Multi-Region Audit & Athena Security Forensics

FinOps Resource Governance with Tagging & The Stopinator

Rightsizing Compute Optimization & TCO Modeling

Declarative Infrastructure as Code with AWS CloudFormation

CloudFormation Deployment Troubleshooting & Drift Detection

Challenge: Autonomous CloudFormation Isolated VPC & Compute

Amazon SageMaker Machine Learning Container Pipeline