[
  {
    "id": "aws-waf-architecture",
    "title": "AWS WAF Architecture",
    "tags": ["AWS WAF", "Terraform", "CI/CD"],
    "description": "Centralized domain protection with AWS WAF, rate limiting, managed rule groups, logging and monitoring. Automated via Terraform and CI/CD pipelines.",
    "type": "production"
  },
  {
    "id": "aws-organizations-iam",
    "title": "AWS Organizations and IAM Identity Center",
    "tags": ["AWS Organizations", "IAM Identity Center", "Infrastructure as Code", "SCPs"],
    "description": "Multi-account environment with Permission Sets, security baselines, SCPs and governance infrastructure as code.",
    "type": "production"
  },
  {
    "id": "cloud-network-standardization",
    "title": "Cloud Network Standardization",
    "tags": ["VPC", "VPC Flow Logs", "Firehose", "CloudWatch"],
    "description": "VPC architecture standardization across multiple AWS accounts with centralized logging via VPC Flow Logs, Firehose and CloudWatch.",
    "type": "production"
  },
  {
    "id": "kubernetes-eks-operations",
    "title": "Kubernetes / Amazon EKS Operations",
    "tags": ["EKS", "Kubernetes", "networking", "security"],
    "description": "Production EKS operations covering networking, ingress, storage, security, troubleshooting, upgrades and reliability.",
    "type": "production"
  },
  {
    "id": "application-waf-modsecurity",
    "title": "Application-Level WAF",
    "tags": ["ModSecurity", "Nginx", "OWASP CRS"],
    "description": "ModSecurity with Nginx and OWASP Core Rule Set. Anomaly scoring with configurable activation as a separate project alongside AWS WAF.",
    "type": "production"
  },
  {
    "id": "ai-context-engineering",
    "title": "AI-Assisted Cloud Operations Context",
    "tags": ["Context Engineering", "AI", "operational context"],
    "description": "A structured technical context layer for querying infrastructure information using AI. Included cloud resources, AWS accounts, regions, infrastructure standards, security guardrails, WAF log locations, VPC Flow Log locations, Firehose pipelines and operational procedures. Enabled less experienced team members to consult technical information more easily and support operational and security analyses.",
    "type": "production"
  }
]