Projects
What I've built and what it achieved.
At work
Rust MCP server for CloudWatch Logs
Amazon Web Services
An internal Model Context Protocol (MCP) server that lets AI agents look up and run sensitive operational commands without exposing credentials.
- Pulls time-ranged log data and system state from multiple AWS accounts and services.
- Interprets logs, works out the root cause, and suggests mitigations.
- Built to run the team's routine operations work automatically.
- Cut triage time from about 30 minutes to about 15, with no clicking through the console account by account.
- Designed and built for the CloudWatch Logs Sycamore team.
AI MetaRepo
Amazon Web Services
A "metarepo" that gathers every package behind a service into one VS Code workspace, so AI agents can search and reason across the whole service instead of one package and pipeline at a time.
- Each package stays its own Git repository inside the workspace, with its own history and commits.
- An AI agent role retrieves packages on request, by pipeline, package name, or name prefix, and adds them to the workspace.
- One semantic search covers all 50+ packages: TypeScript AWS CDK infrastructure, pipeline and test automation, and the service's schemas and business logic.
Shared CDK constructs and pipeline modernization
Amazon Web Services
Infrastructure as code (IaC) design for CloudWatch Observability Admin, written in TypeScript with the AWS CDK.
- Reusable constructs adopted across 50+ packages and 30+ pipelines.
- Moved pipelines from legacy Ruby templates to centrally managed CDK pipelines, which reduced drift and simplified pipeline creation and management.
- Mentored engineers on CDK patterns and led infrastructure design reviews.
Automated region expansion
Amazon Web Services
Automation that brings CloudWatch Observability Admin up in new AWS Regions.
- Cut per-region setup from days to hours, across 17 region builds.
- Co-designed the "donor region" process that launched CloudWatch Logs in new regions between 4 and 6 weeks before its dependencies were ready.
API Gateway region launches
Amazon Web Services
Led API Gateway launches in 14 new AWS Regions and 3 Amazon Dedicated Cloud regions, including air-gapped government regions.
- Automated the region build runbook with Python, Jinja, and ERB templates, saving 2 weeks per region.
- Owned API Gateway region builds end to end as both project manager and engineer: planned and coordinated the work across 4 teams, then built, deployed, and launched the service in each new region.
On my own
Open source · Python package on PyPI
A command-line tool that turns school breakfast and lunch menus into calendar feeds you can subscribe to in Apple Calendar, Google Calendar, or Home Assistant.
- Stable event IDs, so refreshing a feed updates events instead of making duplicates.
- Looks up the current menu each run, so nothing breaks when the school year changes.
- A nightly GitHub Actions job rebuilds the feeds and publishes them to a secret Gist, updating only the files that changed, so subscribed calendars stay current on their own.
- The nightly job hides school IDs and error details from its build logs, which are public.
- Published on PyPI by a release workflow that tests, builds, and signs each release with Sigstore so anyone can verify it.
Public dataset
Machine-readable autocross (SCCA Solo) PAX/RTP index data, from 1998 to today, as JSON, YAML, and CSV.
- A weekly GitHub Actions job checks the source and opens a pull request when values change.
- JSON Schemas, class history (renames and splits), and a source citation for every year.
Open source · Website
This website: my portfolio, resume, and blog. A static site built with Jekyll and published to GitHub Pages.
- Plain HTML and one small stylesheet, so pages load fast and work in any browser.
- Content lives in Markdown and YAML data files, so most updates don't touch the page templates.
- Light and dark modes follow the visitor's system setting, with readable contrast in both.
- The resume page prints straight to a clean PDF.
- Every change is built and link-checked by GitHub Actions before it goes live.
More on GitHub.