Secrets Management · 2025
Vaultify
Centralized platform to securely store, organize, and manage application secrets, API keys, credentials, and configuration data with access control, published on AWS Marketplace as SaaS and server products.
Marketplace SaaS & Server AMI
Packaged as both an automated AWS Marketplace SaaS listing and standalone AMI server product with automated provisioning.
FTR & WAFR Compliance
Engineered evidence and audit architecture diagrams for S3 access logging, AWS Config rules, Security Hub, Macie, and CloudWatch Synthetics canaries.
CDK & Packer Automation
Fully automated TypeScript AWS CDK infrastructure and reusable Packer golden AMIs with parameterized inputs.
AWS Marketplace Compliance & Scanner Remediation
Moved RDS passwords to SSM SecureString dynamic references to eliminate hardcoded database secrets.
Parameterized EC2 key pairs and AMI IDs to ensure portable, multi-account Marketplace deployments.
Removed hardcoded Availability Zones in AWS CDK to support arbitrary customer VPC layouts.
Configured CloudFront POST method handling and origin policies for the AWS Marketplace fulfillment endpoint.
Instrumented automated CloudWatch Synthetics canaries and health probes for continuous uptime verification.
Implemented Macie sensitive data classification and AWS Config rules for automated compliance auditing.