Reuben Mulholland

About Me

Cloud builder with a background in engineering and product leadership. Experienced in IaC, CI/CD pipelines, and multi-account AWS architectures. Blend hands-on execution with product ownership, ensuring systems are robust, secure, and aligned to business goals.

Check out my projects and blog posts to see the build details behind the headlines. More updates are on the way.

Projects

Completed

Cloud Resume Challenge

(Webpage & Visitor Count)

I wanted to take the concepts from my AWS Solutions Architect Associate certification and apply them in practice. This project touches almost every part of the cloud stack: serverless infrastructure, Infrastructure-as-Code, CI/CD automation, and security. The result is a hands-on proof that ties theory to a live, production-ready system.

Read blog

HTMLCSSJavaScript CloudFrontS3DNS Route53ACM API GatewayLambdaPython boto3DynamoDB SAMCloudFormationYAML GitHub ActionsREST API PyTestUnit Tests Integration TestsE2E Tests OIDCCORS MFAAWS Vault 100% IaC

Multi-Account + CI/CD Promotion Pipeline

After completing the CRC, I wanted to push further into professional-grade workflows. This project explores how real companies implement multi-account / multi-environment deployments, with GitHub Actions, approvals, OIDC auth, and rollback automation. It also serves as my own “sandbox” to safely experiment without breaking production.

Read blog

AWS OrganizationsMFA GitHub ActionsImmutable Artifact Promotion Multi-EnvironmentStaged Deployments ApprovalsRollback SAMS3 ArtifactsLifecycle Policies ChecksumsSSM Parameter Store IaCYAML Shell Scripts10–15 min Deploy Loop OIDC – no long-lived keys

Up Next

Observability & Access

Org-wide visibility and access controls: CloudWatch dashboards/alarms, CloudTrail logging for auditability, and IAM Identity Center for scalable user access across accounts.

CloudWatchCloudTrail Identity CenterMonitoring

Protection

Kill Switch Lambda: Cost guardrails using AWS Budgets + SNS + a Kill Switch Lambda that can halt deployments when spend crosses thresholds. Web Application Firewall: Basic protection for the CloudFront distribution.

BudgetsSNSLambda API GatewayS3 Route53WAF

Containers/Kubernetes

Extend the promotion model to containerized workloads using Docker + ECR, orchestrated via ECS or EKS with GitHub Actions and provisioned using Terraform.

DockerECR ECS/EKSCI/CD TerraformKubernetes