Cloud Engineer · AWS · Cloud Architecture & Security

MOHAMMED GAMAL
AL JAAFARI

Building Secure Cloud Infrastructure.

Exploring cloud architecture, AWS networking, security, and reliable infrastructure through hands-on engineering projects.

Explore My Projects GitHub

01 — About

Learning cloud the hard way: by building it.

I'm Mohammed, an aspiring cloud engineer focused on AWS. I'm interested in how well-designed networks, least-privilege access and sensible automation make infrastructure both secure and dependable.

I learn by building: designing networks, locking down access, and documenting what I learn along the way. This site is itself a small example — a static page served privately from S3 through CloudFront.

02 — Cloud Architecture

A secure, layered static-site architecture.

The pattern this very site uses: the bucket stays private and only CloudFront can read it.

RequestResponse

    1. VisitorBrowser
    2. Route 53DNS · alias record
    3. CloudFrontCDN · HTTPS · caching
    4. S3 (private)Block Public Access · OAC
    ACMTLS certificate (us-east-1) attached to CloudFront
    • Private originS3 Block Public Access stays on; access via Origin Access Control only.
    • Encrypted in transitHTTPS enforced with an ACM certificate; HTTP redirects to HTTPS.
    • Least privilegeBucket policy allows only this CloudFront distribution to read objects.

    03 — Featured Projects

    Work in progress.

    Real projects will appear here as they are completed and published on GitHub. Cards marked Placeholder are not finished work.

    This site

    This Portfolio

    Static site hosted on a private S3 bucket behind CloudFront, ACM and Route 53.

    HTML · CSS · JavaScript · AWS

    Placeholder

    Secure VPC Design

    Planned: public/private subnets, routing, NAT and security groups.

    Coming soon

    Placeholder

    IAM & Security Lab

    Planned: least-privilege policies, logging and monitoring.

    Coming soon

    Browse my repositories on GitHub →

    04 — Technical Skills

    Foundations I'm building on.

    Areas I'm actively studying and practising — no inflated ratings.

    AWS

    • EC2
    • S3
    • IAM
    • VPC
    • CloudFront
    • Route 53

    Networking

    • TCP/IP & DNS
    • Subnets & CIDR
    • Routing
    • Firewalls & security groups

    Linux

    • Command line
    • Users & permissions
    • Basic administration

    Cloud Security

    • Least privilege
    • Encryption in transit
    • Shared responsibility
    • Logging & monitoring

    05 — Contact

    Let's connect.

    Open to conversations about cloud engineering, learning and opportunities.

    LinkedIn GitHub