Kathmandu, Nepal Learning by building

Hey, I'm

Ritik Sah.

Cloud & DevOps
Engineering Student

I build, break, and understand Linux and cloud systems. This is where I share the projects, experiments, and lessons along the way.

Explore my work Let's talk
Latest projectLinux administration & monitoring
Illustrated portrait of Ritik Sah with curly hair, glasses and a navy blue shirt.
A little personality behind the projects.

Studying Cloud Computing & Cybersecurity
KFA Business School & IT

AWSSolutions Architect training ISC²Certified in Cybersecurity LPILinux Essentials
Technical Domains

WHAT I BUILD & STUDY.

I focus on cloud infrastructure, web deployment pipelines, server security, and system automation. These are the areas I am practicing through coursework and hands-on projects.

Explore Project Labs

AWS CloudFront & S3 Deployment

CDN & Static Site Hosting

Deploying static websites using Amazon S3 bucket origin storage, AWS CloudFront global edge caching, Route 53 custom domain management, and ACM SSL certificates.

AWS High Availability

Auto-Scaling & Multi-AZ

Studying how EC2 Auto Scaling, load balancers, Route 53 and database design contribute to resilient AWS applications.

Terraform & CI/CD Pipelines

Infrastructure as Code

Practicing Terraform configuration and GitHub Actions workflows for repeatable infrastructure changes.

Linux Hardening & Security

Ubuntu 24 & CIS Benchmarks

Practicing Ubuntu server hardening with UFW, Fail2ban, Auditd and Lynis in controlled labs.

My Engineering Workflow

How I Deploy Projects

A structured process for building reliable cloud infrastructure.

1
Step One

Architecture Planning

Defining system requirements, choosing AWS resources (S3, CloudFront, EC2, RDS), and drafting network subnets.

2
Step Two

Terraform & Code Setup

Writing clean, modular Terraform IaC modules or Docker Compose definitions to automate resource creation.

3
Step Three

Deployment & Hardening

Deploying static assets to S3 + CloudFront CDN, configuring SSL/TLS certificates via ACM, and hardening Linux servers with UFW and Fail2ban.

4
Step Four

Testing & Verification

Testing global CDN latency, verifying Route 53 DNS records, running Lynis vulnerability scans, and monitoring logs.

My Engineering Portfolio

Selected Projects & Labs

AWS projects shown here are completed labs; their cloud resources are currently offline. Source code is linked where available, and I am adding more project evidence over time.

AWS FEATURED PROJECT · CLOUDFRONT & S3

Global Website Deployment via AWS S3 & CloudFront CDN

Deployed and secured a high-performance, globally distributed static website on AWS. Configured an Amazon S3 bucket for origin asset storage, created an AWS CloudFront CDN distribution with Origin Access Control (OAC) to block direct public access to S3, linked a custom domain via Amazon Route 53, and provisioned SSL/TLS certificates using AWS Certificate Manager (ACM). This was a completed AWS lab; the account and infrastructure are currently offline.

AWS ARCHITECTURE DIAGRAM S3 + CloudFront CDN + ACM SSL + Route 53
Users / Clients Route 53 DNS AWS CloudFront CDN Global Edge Cache ACM SSL / TLS Encryption Amazon S3 Origin
AWS CloudFront Amazon S3 ACM SSL Route 53
AWS CLOUD TRAINEE · SERVERLESS

Serverless Cloud Resume

Role: AWS Cloud Trainee

  • • Overview & Hosting: Built a static resume website hosted on Amazon S3 to demonstrate foundational cloud capabilities.
  • • Security & IAM: Authored custom JSON bucket policies and IAM access rules to enable secure public read access while restricting backend resource settings.
  • • Core Learnings: Gained hands-on experience in cloud storage architecture, object-level security management, and AWS console resource provisioning.
Amazon S3 AWS IAM HTML/CSS
AWS CLOUD · EC2 & RDS

AWS Multi-Region Infrastructure Lab

Multi-region web infrastructure utilizing EC2 Auto Scaling Groups, Application Load Balancers (ALB), Route 53 health check failover, and RDS Multi-AZ within a region.

AWS Multi-Region Architecture
Route 53 ➔ regional ALBs ➔ EC2 Auto Scaling; RDS Multi-AZ remains within one region
EC2 ASG ALB RDS Multi-AZ
DEVOPS / IAC · TERRAFORM

Terraform AWS GitOps Pipeline

Automated Terraform IaC project provisioning AWS VPC subnets, Security Groups, and EC2 instances with S3 remote state storage and GitHub Actions CI/CD workflows.

Terraform IaC Pipeline
GitHub Commit ➔ Actions CI/CD ➔ Checkov Scan ➔ S3 State Lock ➔ AWS Provision
Terraform S3 State GitHub Actions
LINUX SECURITY · 2026

CIS Hardened Ubuntu 24.04 Server

Ubuntu security lab informed by CIS guidance, covering UFW firewall posture, Fail2ban SSH protection, Auditd system auditing, and Lynis compliance reporting.

Ubuntu UFW Lynis
LOCAL LAB · DOCKER & CI

Docker Health API

Containerized a Flask API with Docker Compose, a health probe, and two HTTP integration tests. GitHub Actions builds the image and tests the running container. Documented as a local learning project with reproducible setup steps.

Docker · Python · GitHub Actions
Source & guide ↗ Passing CI run ↗
LINUX ADMINISTRATION · LAB

Linux Server Administration & Monitoring

Extended my health monitor into a Linux administration lab: resource checks, service accounts, systemd timers, rotated logs and verified backups. Includes SSH/UFW configuration and automated failure-and-recovery tests.

Python · Bash · systemd
Code & guide ↗
GITHUB REPO · PYTHON

PFM (Personal Finance Manager)

Personal finance tracking application built in Python to log transactions, compute monthly category spending, and export analytics.

Python 3
Source code ↗
Academic & Professional Credentials

Certifications, Training & Skills

AWS

AWS Solutions Architect Training

Course completed · exam not passed

Training completed · no certification claimed
ISC²

Certified in Cybersecurity (CC)

ISC² · 2025

Credential earned
LPI

Linux Essentials Certificate

Linux Professional Institute · 2024

Credential earned

Technical Skillset & Technologies

Focus Tools & technologies Practice Evidence
AWS cloud S3, EC2, VPC, CloudFront, Route 53 Training & project labs See projects
Linux automation Ubuntu, Bash, systemd, cron Built and documented a monitor View code ↗
Infrastructure as code Terraform, GitHub Actions Project work See projects
Containers Docker, Docker Compose Hands-on labs Lab practice
Network security Networking fundamentals, Wireshark, Nmap Coursework & practice View coursework
Learning milestones

Course certificates

Completed coursework in cybersecurity, Python and networking through Cisco Networking Academy.

3 certificates · View the original PDFs
Common Questions

Frequently Asked Questions

How did you set up static website deployment on AWS CloudFront & S3?
I hosted static website files in an Amazon S3 bucket, blocked public S3 access, configured AWS CloudFront CDN with Origin Access Control (OAC), provisioned a free SSL/TLS certificate via ACM, and routed custom DNS records using Amazon Route 53.
What Linux security hardening steps do you apply?
I practice Ubuntu hardening with CIS guidance: disabling root SSH logins, configuring strict UFW firewall policies, enabling Fail2ban SSH brute-force protection, setting sysctl kernel parameters, and running Lynis security audits.
What institution are you studying at?
I am currently studying Cloud Computing and Cybersecurity at KFA Business School & IT in Kathmandu, Nepal.
Are you available for internships, full-time roles, or projects?
Yes! I am open to Cloud Engineer, DevOps, and Systems Infrastructure roles, internships, and project collaborations.
Get In Touch

Let's Connect & Collaborate

Whether you have an inquiry about cloud infrastructure, DevOps deployment, or career opportunities, feel free to send me a message.

Open to opportunities

Let’s talk about your project.

I’m interested in internships and projects involving Linux, cloud infrastructure and automation. Reach me through one of the direct channels below.

Email me ↗ Connect on LinkedIn ↗

Academic Base & Location

Ritik Sah · KFA Business School & IT · Kathmandu, Nepal.
Available for remote roles and projects worldwide.

Direct Contact Channels

Feel free to connect via any of my personal links below.

GitHub Profile

github.com/hritiksah00

Email, LinkedIn and GitHub are the best ways to reach me.

Let's Build Something Resilient Together.

Open to internships, junior roles and projects involving cloud infrastructure, Linux and automation.

Send Me A Message