GitHubの依存関係と開発ルールの不整合を検出し、改定案のレビュー・承認からAIコーディング支援ツール向け指示ファイルのDraft PR配布までを管理するアプリケーション。

Automated web server infrastructure provisioning across AWS using Terraform (IaC) with Nginx, custom security groups, and modular configuration.

Telegram bot that watches willhaben.at and kleinanzeigen.de and scores deals against per-model market medians. TypeScript, LLM classification, AWS via Terraform

A production-style, cost-optimized containerized web application deployed on AWS using Terraform infrastructure-as-code and automated via a GitHub-integrated CI/CD pipeline

Documented Terraform practice on AWS: VPC networking, S3, remote state, EC2/NGINX, and static website hosting.

PrismGate Enterprise v2.0: In-VPC Serverless AI FinOps & Governance Gateway on AWS Bedrock

Claude Code plugin: agents, principle skills, guardrail hooks and DevSecOps GitHub Actions templates for Django/DRF, React, Terraform and containers.

Internal Developer Platform on Backstage + Azure: one form creates a repo, Terraform infra (approved in Backstage), CI/CD and a running app on AKS, with live health in the portal. OIDC, Workload Identity, policy gates. Runs on an Azure Free Trial for ~$0.18/h.

Free, hands-on DevOps and SRE roadmap: Linux to Kubernetes, GitOps, observability, platform engineering and AI for operations. 7 phases, 34 modules, labs you can run on one Linux machine, and 3 capstone projects.

A scalable, highly available, and secure 3-tier WordPress infrastructure on AWS built with Terraform.

Terraform IaC for Azure: App Service, Azure SQL, Key Vault, Service Bus.

Java service on AWS built as code across four repositories: architecture, diagrams and docs

Production AWS platform as code: an EC2 Image Builder golden image factory (x86 + Graviton), EC2 instances with no inbound port reached only through Session Manager, cross-account VPC peering, and CI running fmt, validate, tflint and checkov with no cloud credentials. Sanitized, with the decisions documented in the code.

Agentic, scanner-grounded code review for the whole PR: app code, infrastructure (Kubernetes, Docker, Terraform, GitHub Actions) and AI/LLM/agent code (OWASP LLM Top 10, MCP, agent skills).

Spellwarden Infra Pack: skills for infrastructure operations, for Claude Code.

Paved-road DevSecOps pipeline: Gitleaks, Semgrep, Checkov, Trivy, Cosign, SBOM – reusable GitHub Actions with policy gates.

Internal developer platform: self-service cloud and Kubernetes resources on Terraform, plus an incident agent platform with guardrails, evals, traces and audit. Everything runs locally on kind, LocalStack and Ollama.

Terraform on AWS for PulseForecast: ECS Fargate, ALB, ECR, keyless GitHub OIDC CI/CD, safe rollbacks and cost guardrails.

AWS platform as code: Terraform modules (VPC, RDS, ECS Fargate, ALB) shipped through a plan-on-PR, apply-on-merge pipeline with OIDC and least-privilege IAM

Run Uptime Kuma on Bunny Magic Containers — persistent monitoring, secure access, backups and a live demo, without managing a VPS.

Enterprise Azure Hub-and-Spoke Network Landing Zone in Terraform: Azure Firewall with application & network rules, Azure Bastion, VPN/ER Gateway, micro-segmented subnets, and UDR inspection.

A resilient, self-healing Python & Go microservice on Kubernetes featuring automated probe-based fault recovery, HPA autoscaling, and secure non-root multi-stage containers. Managed end-to-end with Terraform IaC, Ansible host provisioning, Prometheus/Grafana observability, and GitHub Actions CI/CD.

Turn a legacy app into trusted AI agents with Microsoft Foundry: Terraform-built platform, multi-agent workflow, evals, and red teaming.

Serverless job tracker on AWS with Terraform and CI/CD

Portfolio of Li ZhenXi (SRE, cloud and AI infrastructure), run as a production service: Go on Cloud Run with its own live SLO, OpenTelemetry traces, DORA metrics and build-once keyless deploys; Next.js + three.js; Terraform

Azure Kubernetes infrastructure and GitOps application delivery with Terraform, Helm, and Argo CD.

Evidence-backed Kubernetes release promotion with Kargo, Argo CD, Chaos Mesh, signed OCI images, and paid x402 testnet traffic.

GitHub Actions CI/CD for Terraform with security scanning, branch protection and OIDC deployment

Serverless task manager on AWS: React/TypeScript frontend, Cognito auth, API Gateway + Lambda + DynamoDB, CloudFront, Terraform IaC, and GitHub Actions CI/CD with OIDC.

Enterprise Azure AI & GenAI Landing Zone in Terraform: Zero-Trust Private Network, APIM AI Gateway with token rate-limiting & semantic caching, Azure OpenAI GPT-4o, and Vector RAG.