A full walkthrough of Zero Trust architecture principles and how AWS implements them — IAM Identity Center, VPC Lattice, PrivateLink, and moving from perimeter security to identity-based access.

A full walkthrough of AWS CI/CD tools — CodePipeline stages and actions, CodeBuild buildspec, CodeDeploy deployment strategies, and end-to-end pipeline examples

A beginner-friendly walkthrough of Amazon GuardDuty using its built-in sample findings generator — see every major finding category and severity level without attacking anything or spending a cent.

Assembling all Week 3 security tools into a single GitHub Actions pipeline — Semgrep, Snyk, Checkov, tfsec, Trivy, and ZAP running as sequential security gates on every PR and push.

A full walkthrough of AWS CloudFormation and CDK — template structure, parameters, outputs, intrinsic functions, change sets, nested stacks, and CDK constructs

A full walkthrough of OWASP ZAP for dynamic application security testing — spidering, active scanning, API testing, and running ZAP in CI against a staging environment.

A full offensive security walkthrough against a MERN stack web application — from initial recon all the way through exploitation. Methodology I applied against my own live app.

A full walkthrough of Checkov and tfsec — scanning Terraform, CloudFormation, and Kubernetes manifests for security misconfigurations before they reach production.

A full walkthrough of AWS DynamoDB — tables, partition and sort keys, read/write capacity, GSIs, DynamoDB Streams, DAX, TTL, transactions, and design patterns

A full walkthrough of Software Composition Analysis using Snyk and GitHub Dependabot — tracking vulnerable dependencies, generating SBOMs, and automating dependency updates.