Koushik B

Enthusiastic DevOps Engineer, eager to contribute to team success through smart work, attention to detail and excellent organizational skills. Clear understanding of Cloud Services, Application Monitoring and DevOps tools. Motivated to learn, grow, and excel in IT Industry.

Automated RDS Database Restoration and Deployment Workflow.

• Developed a Lambda function using Python and the Boto3 library to automate the restoration of the pre-prod
  database from the latest snapshot of the production database.
• Utilized AWS S3 to store environment configuration files, updating the S3 file with the endpoint URL of the
  newly restored pre-prod database upon completion of the restoration process.
• Integrated S3 event notifications to trigger a Jenkins job upon updating the environment file, initiating the Jenkins
  pipeline of pre-prod environment.
• Implemented Jenkins pipeline logic to fetch branch or tag details from the last build job, utilizing this information
  to start the appropriate deployment pipeline for the pre-prod database environment.
• Ensured robust error handling and logging mechanisms within the Lambda functions to facilitate troubleshooting
  and monitoring of the automation process.

Automated AWS SSO setup for secure RDS access using bash script.

• Automated the installation of required tools such as curl, AWS CLI, and Session Manager plugin, ensuring
  consistent setup across different operating systems (Linux and macOS).
• Implemented logic to check for existing configuration files and profiles, creating them if they do not exist, and
  seamlessly integrating AWS SSO configurations for multiple profiles.
• Orchestrated the selection of RDS endpoints based on user input, facilitating dynamic configuration for four
  different environment databases.
• Integrated SSH key generation and SSH tunnelling setup, enabling secure access to RDS instances through
  bastion hosts and managing temporary DB authentication tokens for enhanced security.
• Configured SSH proxy command and SSH config files for streamlined SSH tunnelling and SSH session
  management, optimizing the workflow for accessing RDS databases.

Infrastructure Automation with Terraform and AWS

• Created a custom VPC with defined CIDR blocks, enabling DNS support and hostnames.
• Established public and private subnets across multiple availability zones for network segmentation.
• Attached an internet gateway to the VPC to enable outbound internet access for resources in the public subnet.
• Configured VPC endpoints for essential AWS services such as EC2, SSM, and SSM Messages, enabling private communication with AWS services without internet access.
• Defined security groups to control inbound and outbound traffic for the VPC and EC2 instances.
• Created IAM roles and policies for EC2 instances to grant necessary permissions for accessing AWS services.