aws cost management — right-sizing a personal estate
A billing audit of the tacedata.ca AWS account that found $59/month in infrastructure charges on a site that was supposed to cost nearly nothing — and reduced it to $3.63/month.
Cloudfront
analytics: stage 1: what the cloudfront free plan doesn't tell you
Setting up server-side traffic analytics for tacedata.ca — and hitting a hard wall in the CloudFront Free pricing plan that blocks all logging features.
traffic analytics — cloudfront logs and athena
Attempting server-side traffic analytics for tacedata.ca using CloudFront access logs and AWS Athena — and what the CloudFront Free pricing plan actually allows.
security remediation — what we got wrong
A post-launch security review of tacedata.ca uncovered sensitive AWS identifiers committed to a public repository. This is a full account of what was exposed, how it was found, and what it took to fix it.
site: stage 5: cutting over a website
Moving tacedata.ca from Websavers DNS to AWS Route 53 — what the cutover actually involves, and how to do it without taking the site down.
site: stage 4: building the site itself
Getting the site into a state worth sharing — PaperMod setup, profile home page, content structure, and a few problems solved along the way.
tacedata.ca — this site
A static portfolio site built with Hugo and deployed to AWS via a fully automated GitHub Actions pipeline.
site: stage 3: deploying a static site on aws
How we set up S3, CloudFront, and a GitHub Actions deploy pipeline for tacedata.ca — no long-lived credentials, no manual deploys.