🔐 DevSecOps & Cloud Security Projects

This repository showcases hands-on projects in AWS Security, Infrastructure as Code (Terraform), Container Security, and Secure CI/CD Pipelines. These examples demonstrate practical implementations of secure-by-design principles for modern cloud environments.

---

📂 Repository Structure

📂 devsecops-projects/ │ ├── aws-security-projects/ # AWS-specific security labs ├── terraform-projects/ # Infrastructure as Code examples ├── container-security/ # Docker/Kubernetes security projects ├── ci-cd-security/ # Secure pipeline implementations └── docs/ # Architecture diagrams and notes

---

✅ Featured Projects

AWS Security Projects

• Secure IAM Setup
  Implemented least privilege policies and role-based access control.
• KMS Encryption for S3
  Configured bucket encryption using AWS KMS.
• CloudTrail Monitoring
  Integrated CloudTrail with SecurityHub for compliance and alerting.

➡ ./aws-security-projects

---

Terraform Projects

• Multi-environment deployments (Dev, Staging, Prod).
• Remote state management with S3 and DynamoDB.
• Security best practices for IaC.

➡ ./terraform-projects

---

Container Security

• Hardened Docker images using best practices.
• Implemented vulnerability scanning with Trivy.
• Deployed secure containers on AWS Fargate.

➡ ./container-security

---

CI/CD Security

• Built secure GitHub Actions pipelines.
• Integrated automated security checks (SAST/DAST).
• Secrets management using AWS Secrets Manager.

➡ ./ci-cd-security

---

📚 Documentation

Architecture diagrams and security workflows are available in the ./docs folder.

---

🔗 Connect with Me

• 🌐 https://cywatt.io
• 💼 https://www.linkedin.com/in/betty-godier
• 📘 Publication: The IoT Security Blueprint (RED / ETSI EN 303 645 / CRA readiness)

---

⭐ Tip: If you find these projects helpful, feel free to star this repo!