IDENTITY // CLOUD INFRASTRUCTURE & SYSTEMS

LOC: JAKARTA BARAT · STATUS: READY FOR HIRE

CLOUD SYSTEMS ENGINEER // AWS · LINUX · IAC

Ferdian Hanif

I build and manage AWS cloud systems. I keep servers running, scale them automatically when traffic spikes, and automate routine tasks with Linux and Python.

Computer Engineering graduate from Universitas Andalas. Experienced in physical network operations at PT Semen Padang, automated AWS cloud setups, and Linux systems administration.

DEGREE: B.Eng Computer Engineering

OPS: PT Semen Padang

LOC: Jakarta Barat, ID

VIEW ARCHITECTURES DOWNLOAD CV

cloud-shell // aws-cli

> aws sts get-caller-identity

{

"UserId": "AROA49J87V7EXAMPLE:ferdian",

"Account": "VERIFIED_ENGINEER",

"Arn": "arn:aws:iam::cloud:role/InfrastructureEngineer"

}

> aws cloudformation describe-stacks --query "Stacks[].StackStatus"

[ "CREATE_COMPLETE", "UPDATE_COMPLETE" ]

REGION: ap-southeast-1 (Singapore) MFA ENFORCED

Verified Builds

Zero-Trust

High Availability

24/7

Event Detection

FEATURED PROJECT 01 // LINUX SECURITY BASELINE & DRIFT GATEKEEPER

CIS BENCHMARK L1 CI PASSING

SYSTEMS HARDENING & AUTOMATED REMEDIATION

Linux Configuration Drift & Security Baseline Gatekeeper

Policy-as-Code Compliance, CIS Hardening, and Idempotent Bash Remediation

Lightweight compliance auditor that inspects Linux configuration drift against CIS Benchmark Level 1 in under 0.2 seconds. Features POSIX exit codes (0/1/2), automated bash remediation generation, and single-file HTML reports.

Policy-as-Code: Audits SSH hardening, rogue UID 0 backdoor accounts, password max age, listening sockets, and world-writable SUID binaries.

Automated Remediation: Generates idempotent, syntax-verified remediate.sh scripts with timestamped backups and chmod 700 isolation.

CI/CD & POSIX Standards: Strict exit codes (0 clean, 1 warning, 2 critical) for automated pipeline gates. 100% test matrix passing on GitHub Actions.

TECHNOLOGIES & TOOLS:

Python 3 Linux Internals POSIX Exit Codes PyYAML CIS Benchmark L1 GitHub Actions CI Bash Telegram Bot API

VIEW GITHUB REPO

TERMINAL AUDIT RUN // SUB-0.2S BENCHMARK

Linux Drift Auditor CLI Execution Snapshot

Audits 4 system domains in 0.05 seconds, exits with POSIX code 2 upon finding critical drift, and generates remediate.sh.

FEATURED PROJECT 02 // NETWORK HEALTH MONITOR & FIRST-RESPONDER TRIAGE

AUTONOMOUS FIRST-RESPONDER CI PASSING

NETWORK OBSERVABILITY & AUTOMATED TRIAGE

Network Health Sentinel with Autonomous Incident Triage

Multi-Layer Probing (L3/L4/L7), Flap Damping, and Freeze-Frame Triage at T+0s

Asynchronous network and host health monitor running as a hardened systemd daemon. When endpoints fail, Sentinel instantly freezes diagnostic telemetry (traceroute hops, DNS resolution, host CPU/RAM, and kernel OOM) before transient evidence vanishes.

Multi-Layer Probing: Layer 3 ICMP ping, Layer 4 TCP socket handshake latency, and Layer 7 HTTP/HTTPS status code validation.

Flap Damping & Debounce: Enforces failure threshold counts and cooldown timers to prevent notification storms during intermittent network dropouts.

Freeze-Frame T+0s Triage: Autonomous first responder: runs bounded traceroute, checks DNS resolvers, captures top memory processes, and inspects dmesg OOM killer logs to formulate root cause hypotheses.

TECHNOLOGIES & TOOLS:

Python 3 Linux Systemd Network Sockets Traceroute DNS Resolver Host Telemetry GitHub Actions CI Telegram Bot API

VIEW GITHUB REPO

CLI EXECUTION // SYSTEMD DAEMON

Sentinel CLI Prober Execution and Systemd Service

Multi-layer polling daemon evaluates ICMP, TCP, and HTTP targets in under 250ms with systemd auto-restart.

FEATURED PROJECT 03 // AUTONOMOUS AI AGENT & ZERO-TRUST GATEWAY

ZERO-TRUST & AI INFRA

AWS LIGHTSAIL & AI GATEWAY

Autonomous AI Agent on AWS Lightsail

Zero-Trust Mesh Network, Multi-LLM Gateway and Telegram Daemon

24/7 autonomous task runner on AWS Lightsail ($12/mo). All public web ports are closed; admin access is secured via Tailscale WireGuard and commands run via Telegram bot polling.

Zero-Trust Access: Firewall blocks all incoming web traffic. Admin dashboard accessible exclusively over private WireGuard mesh.

Production Hardening: Resolved hairpin NAT timeout via 127.0.0.1 loopback, added 2 GB SSD swap to prevent OOM kills, and enabled systemd lingering for boot persistence.

Predictable FinOps: Flat $12/month VPS with 3 TB transfer. Multi-LLM free-tier pooling via OmniRoute keeps inference cost at $0.

TECHNOLOGIES & TOOLS:

AWS Lightsail Ubuntu Linux Docker Tailscale WireGuard Hermes Agent OmniRoute Telegram Bot API Systemd

TOPOLOGY // ZERO-TRUST AI ARCHITECTURE

Tailscale WireGuard Mesh Tunnel

Hermes Autonomous Agent Daemon

STATUS: 24/7 AUTONOMOUS SYSTEMD DAEMON ON AWS LIGHTSAIL

INSPECT GITHUB REPO

TECHNICAL STACK & SYSTEMS COMPETENCIES

HANDS-ON TOOLING

STACK // CLOUD PLATFORM PRIMARY

AWS Core Infrastructure

VPC networking, compute instances, relational databases, and IAM security policies.

Amazon VPC Amazon EC2 Amazon S3 Amazon RDS Multi-AZ AWS IAM Amazon CloudWatch AWS CloudTrail Systems Manager (SSM) AWS Lambda Amazon SNS Amazon EventBridge

STACK // OPERATING SYSTEMS & NETWORKS CORE

Systems & Linux Administration

Linux server administration, automated bash scripting, and network diagnostics.

Linux (Ubuntu / Amazon Linux) Bash Shell Scripting System Hardening Patch Manager TCP/IP & Subnetting DNS / Route Tables VPC Flow Logs Fiber Optics (VFL)

STACK // AUTOMATION & PIPELINES AUTOMATION

IaC & CI/CD Automation

Declarative infrastructure as code, CI/CD automation pipelines, and cloud SDKs.

AWS CloudFormation Terraform / OpenTofu GitHub Actions CI/CD Python Boto3 SDK Git Monorepos Docker Containers REST APIs Cloud-Init Automation

STACK // DATA & HARDWARE DATA & SYSTEMS

Data & Systems Diagnostics

Database queries, structured log analytics, and physical hardware diagnostics.

PostgreSQL SQL (Athena / RDS) Python Pandas Network Cabling (RJ45/LAN) ESP32 Microcontrollers Structured Log Analytics

Foundation: Connecting physical network operations from PT Semen Padang to automated cloud infrastructure.

ALL SKILLS CODE-BACKED

AWS INFRASTRUCTURE CAPABILITY MATRIX // 50 VERIFIED BUILDS

8 DOMAINS AUDITED

AWS Infrastructure Capability Matrix

50 practical AWS infrastructure builds: custom VPC architectures, EC2 clusters, RDS databases, CloudFormation IaC templates, and security audits.

Showing 6 of 50 builds

Monorepo: github.com/ferdianhanif/aws-cloud-engineering-labs

ID	Build Specification	Category	AWS Services	Scope & Objective	Monorepo
AWS-01	Cloud Sandbox Environment Initialization	Cloud Essentials	AWS IAM CloudShell VPC	Baseline environment configuration and root security verification.	CODE
AWS-02	Amazon EC2 Web Server Lifecycle Management	Compute & OS	Amazon EC2 Security Groups User Data	Bootstrap Apache HTTP web server deployment via shell automation scripts.	CODE
AWS-03	IP Networking & Troubleshooting Commands	VPC & Networking	Linux CLI TCP/IP DNS	Diagnostics of network latency and routing via ping, traceroute, and dig.	CODE
AWS-04	Public & Private IP Address Diagnostics	VPC & Networking	Amazon VPC CIDR Subnets	Network addressing verification and private subnet segmentation.	CODE
AWS-05	Static and Dynamic Elastic IP Architecture	VPC & Networking	Amazon EC2 Elastic IP DNS	Configuring static public IPv4 persistence across instance lifecycle restarts.	CODE
AWS-06	L3/L4 Network Issue Troubleshooting	VPC & Networking	Route Tables Security Groups NACL	Root cause analysis of dropped packets across route tables and security filters.	CODE
AWS-07	Subnet Architecture in Amazon VPC	VPC & Networking	Amazon VPC Subnets Availability Zones	Designing dual-AZ isolated public and private subnet topologies.	CODE
AWS-08	VPC Gateway & Routing Infrastructure	VPC & Networking	Internet Gateway Route Tables VPC	Orchestrating internet breakout for compute instances in public subnets.	CODE
AWS-09	End-to-End VPC Build & Production Web Server	VPC & Networking	Amazon VPC Amazon EC2 Security Groups	End-to-end custom VPC construction hosting a live production web service.	CODE
AWS-10	Database Schema & Table Operations	Database & Data	Relational DB SQL DDL	Structured relational schema definitions and table partitioning.	CODE
AWS-11	Transactional DML Database Operations	Database & Data	SQL DML ACID Compliance	Optimized INSERT, UPDATE, and DELETE operations under transactional integrity.	CODE
AWS-12	Complex Query Formulation & Optimization	Database & Data	SQL DQL Query Optimization	Performance-tuned JOIN operations and high-volume data selection.	CODE
AWS-13	Conditional Data Filtering & Indexing	Database & Data	SQL Filtering Data Indexing	High-efficiency WHERE predicate filtering and compound index usage.	CODE
AWS-14	Aggregate Functions & Analytics Processing	Database & Data	SQL Analytics Aggregations	Statistical transformation and window functions for analytical reporting.	CODE
AWS-15	Data Organization & Grouping Strategies	Database & Data	SQL Grouping HAVING Filters	Multi-dimensional categorical groupings and summarized dataset generation.	CODE
AWS-16	Database Server Build & Application Integration	Database & Data	Amazon RDS PHP Application EC2	Decoupling application tier compute from managed relational database tier.	CODE
AWS-17	Amazon Aurora Distributed Database Cluster	Database & Data	Amazon Aurora Storage Engine Read Replicas	Deploying high-performance fault-tolerant Aurora storage clusters.	CODE
AWS-18	Amazon DynamoDB NoSQL Low-Latency Storage	Database & Data	Amazon DynamoDB NoSQL Partition Keys	Single-digit millisecond query performance with global partition key schema.	CODE
AWS-19	Challenge: Autonomous Database Tier Deployment	Database & Data	Amazon RDS CLI Automation Security Groups	Zero-guidance challenge provisioning relational backend tied to dynamic frontend.	CODE
AWS-20	Systems Hardening via AWS Systems Manager Patch Manager	Security & Governance	AWS Systems Manager Patch Baselines Linux	Automated fleet OS patching and vulnerability remediation without SSH.	CODE
AWS-21	Data-at-Rest & In-Transit Encryption via AWS KMS	Security & Governance	AWS KMS Customer Managed Keys EBS Encryption	Envelope encryption implementation and cryptographic key rotation policies.	CODE
AWS-22	Enterprise Identity & Access Management (IAM)	Security & Governance	AWS IAM RBAC Least Privilege	Fine-grained least-privilege policy authoring and role delegation.	CODE
AWS-23	Malware Protection via AWS Network Firewall	Security & Governance	AWS Network Firewall Suricata Rules VPC	Stateful packet inspection and domain filtering to prevent outbound exfiltration.	CODE
AWS-24	Compute Health Monitoring & CloudWatch Alarms	Observability & Monitoring	Amazon CloudWatch Amazon SNS Amazon EC2	Automated alarm triggers and email notification dispatches on CPU threshold breach.	CODE
AWS-25	AWS CLI Tooling Automation & Credential Security	IaC & Automation	AWS CLI IAM Credentials Bash	Programmatic cloud infrastructure management with secured credential profiles.	CODE
AWS-26	Fleet Management via SSM Run Command & Session Manager	Compute & OS	AWS Systems Manager Session Manager IAM	Secure bastionless shell access and bulk script execution across instances.	CODE
AWS-27	Amazon S3 Static Website & CLI Sync Pipelines	Storage & DR	Amazon S3 AWS CLI Bucket Policies	Static content delivery with granular public read bucket policies.	CODE
AWS-28	Automated EC2 Provisioning via AWS CLI Automation	Compute & OS	Amazon EC2 AWS CLI Shell Scripting	Scripted deployment of customized compute instances with automated tags.	CODE
AWS-29	Challenge: Autonomous EC2 Instance Exercise	Compute & OS	Amazon EC2 Security Groups Linux CLI	Autonomous specification matching and isolated compute node provisioning.	CODE
AWS-30	Instance Creation Troubleshooting & RCA	Compute & OS	Amazon EC2 AMI Instance Types	Diagnosing failure modes across AMI architectural mismatches and quotas.	CODE
AWS-31	Scale & Load Balance Multi-Tier Architecture	Compute & High Availability	Application Load Balancer Target Groups EC2	Traffic distribution across dual Availability Zones via Application Load Balancer.	CODE
AWS-32	Dynamic EC2 Auto Scaling Under Workload Spikes	Compute & High Availability	Auto Scaling Groups CloudWatch Launch Templates	Automated horizontal scaling elasticity based on real-time metric thresholds.	CODE
AWS-33	Amazon Route 53 Health Checks & Failover Routing	VPC & Networking	Amazon Route 53 DNS Failover Health Checks	Automated DNS failover routing directing traffic away from impaired origins.	CODE
AWS-34	Event-Driven Serverless Compute via AWS Lambda	Serverless & Compute	AWS Lambda Python CloudWatch Logs	Stateless serverless function execution triggered by Amazon S3 object events.	CODE
AWS-35	Challenge: Autonomous Serverless Lambda Orchestration	Serverless & Compute	AWS Lambda IAM Roles Python	Autonomous build of event-driven image processing functions without servers.	CODE
AWS-36	Live Database Migration to Amazon RDS for MariaDB	Database & Data	Amazon RDS MariaDB mysqldump	Zero-data-loss relational database export/import migration to managed RDS.	CODE
AWS-37	Complex Multi-Tier Amazon VPC Configuration	VPC & Networking	Amazon VPC NAT Gateway Route Tables	Enterprise network topology with isolated private database subnets and NAT.	CODE
AWS-38	Storage Lifecycle Automation & S3 Versioning DR	Storage & DR	Amazon S3 Amazon EBS Python Boto3	Cron-scheduled automated EBS snapshot lifecycle pruning and S3 object recovery.	CODE
AWS-39	VPC Flow Logs Forensic Analysis & L3/L4 Network Triage	VPC & Networking	VPC Flow Logs Amazon Athena Security Groups	Forensic log analysis resolving L3 default route outages and L4 NACL blocks.	CODE
AWS-40	Amazon EBS Block Storage & Disaster Recovery	Storage & DR	Amazon EBS EBS Snapshots Linux fstab	Volume formatting, fstab persistence, snapshotting, and point-in-time DR restoration.	CODE
AWS-41	Amazon S3 Event Notifications & IAM Prefix Delegation	Storage & DR	Amazon S3 Amazon SNS IAM Policies	Event notifications wired to SNS with prefix-level IAM access segregation.	CODE
AWS-42	Challenge: Granular Object ACL Security & Public Hosting	Storage & DR	Amazon S3 S3 Block Public Access AWS CLI	Decoupling bucket-level BPA to enforce object-level ACL public reads.	CODE
AWS-43	Enterprise Observability with CloudWatch Agent & AWS Config	Observability & Monitoring	CloudWatch Agent EventBridge AWS Config	SSM-deployed CloudWatch agents, log filter alarms, and AWS Config compliance rules.	CODE
AWS-44	CloudTrail Multi-Region Audit & Athena Security Forensics	Security & Governance	AWS CloudTrail Amazon Athena AWS KMS	Forensic triage identifying rogue IAM threat actors and remediating attack vectors.	CODE
AWS-45	FinOps Resource Governance with Tagging & The Stopinator	IaC & Automation	AWS CLI JMESPath Boto3/PHP SDK FinOps	Dynamic compute discovery, automated off-hours shutdown, and tag enforcement.	CODE
AWS-46	Rightsizing Compute Optimization & TCO Modeling	IaC & Automation	AWS CLI Amazon RDS AWS Pricing Calculator	Monolith database decoupling and vertical compute rightsizing cutting costs by 50%.	CODE
AWS-47	Declarative Infrastructure as Code with AWS CloudFormation	IaC & Automation	AWS CloudFormation SSM Parameter Store S3	Automated multi-tier stack deployment using YAML templates and dynamic parameters.	CODE
AWS-48	CloudFormation Deployment Troubleshooting & Drift Detection	IaC & Automation	AWS CloudFormation Drift Detection cloud-init	Root cause analysis on cloud-init failure logs, stack drift audit, and retain teardown.	CODE
AWS-49	Challenge: Autonomous CloudFormation Isolated VPC & Compute	IaC & Automation	AWS CloudFormation Amazon VPC EC2	Autonomous authoring of production YAML stacks with private subnet compute nodes.	CODE
AWS-50	Amazon SageMaker Machine Learning Container Pipeline	Machine Learning & AI	Amazon SageMaker XGBoost Amazon S3	Data partitioning, containerized model training, and artifact storage on S3.	CODE

AWS-01 Cloud Essentials

Cloud Sandbox Environment Initialization

Baseline environment configuration and root security verification.

AWS IAM CloudShell VPC

VIEW IN REPO

AWS-02 Compute & OS

Amazon EC2 Web Server Lifecycle Management

Bootstrap Apache HTTP web server deployment via shell automation scripts.

Amazon EC2 Security Groups User Data

VIEW IN REPO

AWS-03 VPC & Networking

IP Networking & Troubleshooting Commands

Diagnostics of network latency and routing via ping, traceroute, and dig.

Linux CLI TCP/IP DNS

VIEW IN REPO

AWS-04 VPC & Networking

Public & Private IP Address Diagnostics

Network addressing verification and private subnet segmentation.

Amazon VPC CIDR Subnets

VIEW IN REPO

AWS-05 VPC & Networking

Static and Dynamic Elastic IP Architecture

Configuring static public IPv4 persistence across instance lifecycle restarts.

Amazon EC2 Elastic IP DNS

VIEW IN REPO

AWS-06 VPC & Networking

L3/L4 Network Issue Troubleshooting

Root cause analysis of dropped packets across route tables and security filters.

Route Tables Security Groups NACL

VIEW IN REPO

CURATED MATRIX: Showing 6 featured builds

Ferdian Hanif

Linux Configuration Drift & Security Baseline Gatekeeper

Network Health Sentinel with Autonomous Incident Triage

Autonomous AI Agent on AWS Lightsail

AWS Core Infrastructure

Systems & Linux Administration

IaC & CI/CD Automation

Data & Systems Diagnostics

AWS Infrastructure Capability Matrix

Cloud Sandbox Environment Initialization

Amazon EC2 Web Server Lifecycle Management

IP Networking & Troubleshooting Commands

Public & Private IP Address Diagnostics

Static and Dynamic Elastic IP Architecture

L3/L4 Network Issue Troubleshooting

Subnet Architecture in Amazon VPC

VPC Gateway & Routing Infrastructure

End-to-End VPC Build & Production Web Server

Database Schema & Table Operations

Transactional DML Database Operations

Complex Query Formulation & Optimization

Conditional Data Filtering & Indexing

Aggregate Functions & Analytics Processing

Data Organization & Grouping Strategies

Database Server Build & Application Integration

Amazon Aurora Distributed Database Cluster

Amazon DynamoDB NoSQL Low-Latency Storage

Challenge: Autonomous Database Tier Deployment

Systems Hardening via AWS Systems Manager Patch Manager

Data-at-Rest & In-Transit Encryption via AWS KMS

Enterprise Identity & Access Management (IAM)

Malware Protection via AWS Network Firewall

Compute Health Monitoring & CloudWatch Alarms

AWS CLI Tooling Automation & Credential Security

Fleet Management via SSM Run Command & Session Manager

Amazon S3 Static Website & CLI Sync Pipelines

Automated EC2 Provisioning via AWS CLI Automation

Challenge: Autonomous EC2 Instance Exercise

Instance Creation Troubleshooting & RCA

Scale & Load Balance Multi-Tier Architecture

Dynamic EC2 Auto Scaling Under Workload Spikes

Amazon Route 53 Health Checks & Failover Routing

Event-Driven Serverless Compute via AWS Lambda

Challenge: Autonomous Serverless Lambda Orchestration

Live Database Migration to Amazon RDS for MariaDB

Complex Multi-Tier Amazon VPC Configuration

Storage Lifecycle Automation & S3 Versioning DR

VPC Flow Logs Forensic Analysis & L3/L4 Network Triage

Amazon EBS Block Storage & Disaster Recovery

Amazon S3 Event Notifications & IAM Prefix Delegation

Challenge: Granular Object ACL Security & Public Hosting

Enterprise Observability with CloudWatch Agent & AWS Config

CloudTrail Multi-Region Audit & Athena Security Forensics

FinOps Resource Governance with Tagging & The Stopinator

Rightsizing Compute Optimization & TCO Modeling

Declarative Infrastructure as Code with AWS CloudFormation

CloudFormation Deployment Troubleshooting & Drift Detection

Challenge: Autonomous CloudFormation Isolated VPC & Compute

Amazon SageMaker Machine Learning Container Pipeline