edo@cloudstack:~

Mohamed ELKHANFAF

$Cloud & DevOps Engineer

# latest_achievement.json — aws certification

✓ Verified Certification

AWS Certified

Solutions Architect

Associate

Issuer: Amazon Web ServicesLevel: AssociateExam: SAA-C03

✓Verify via Credly

ACTIVE & VERIFIED

aws_saa-c03

$ ./view_projects.sh $ cat resume.pdf $ ssh contact@edo.dev

# SKILLS_MATRIX

Cloud Platforms

▶ AWSACTIVE

EC2 · S3 · RDS · Lambda · CloudFront · IAM · DynamoDB · VPC · CloudWatch

IaC & Automation

▶ TerraformACTIVE

HCL · modules · remote state locking (S3/DynamoDB) · cost optimization

▶ AnsibleLEARNING

Playbooks · roles · inventory

Containers & Systems

▶ DockerACTIVE

Dockerfiles · multi-stage builds · containerization

▶ Linux AdministrationACTIVE

RHEL/Ubuntu · systemd · journalctl · networking · permissions

🔄

CI/CD & Delivery

▶ GitLab CI/CDACTIVE

Pipelines · stages · artifacts · security scans · ECR integration

▶ GitHub ActionsACTIVE

Workflows · secrets · automated testing

▶ NginxACTIVE

Reverse proxy · routing · static optimization

# DEPLOYMENTS

terraform plan — cloudscaleDEPLOYED

$ terraform plan -out=tfplan

Terraform will perform the following actions:

+ resource "aws_vpc" "main" {}

+ resource "aws_subnet" "public" {}

+ resource "aws_subnet" "private" {}

+ resource "aws_db_instance" "postgres" {}

Plan: 15 to add, 0 to change, 0 to destroy.

Network Topology — 2 AZs

AZ-1a

public subnet

private subnet

db subnet

AZ-1b

public subnet

private subnet

db subnet

Cost Save

−$65/mo

no NAT GW

CloudScale

~/cloudscale

AWSTerraformLambdaS3DynamoDBRDSRekognition

Production-ready 15-service AWS infrastructure entirely automated via Terraform with remote S3/DynamoDB state locking. Architected secure private subnets for RDS without NAT Gateways, cutting cloud costs by $65/month. Integrated an event-driven serverless AI pipeline (S3 → Lambda → Rekognition → DynamoDB).

[GitHub][Architecture Diagram]$ terraform apply

gitlab-ci — pitchops · mainDEPLOYED

Pipeline · #47 · triggered by push to main

build

→

test

→

scan

→

push

→

deploy

▶ trivy image scan ✓ 0 HIGH · 0 CRITICAL

▶ docker push → ECR sha256:a3f9…

docker compose ps — EC2 production

frontendnext:alpine:3000Up

backendpython:3.11:8000Up

nginxnginx:alpine:80Up

PitchOps

~/pitchops

DockerGitLab CI/CDAWSEC2S3CloudFrontLinuxNext.js

Containerized multi-service football analytics platform running on a hardened Linux server. Automated the entire SDLC using GitLab CI/CD pipelines for automated testing, Docker multi-stage builds, and Trivy security scans pushing to Amazon ECR. Paired a static Next.js frontend (S3/CloudFront) with a containerized backend.

[GitHub][Pipeline Logs]$ docker compose up -d