In progress · phases 1–3 of 7 done
CertWatch
A serverless SSL/TLS certificate expiry monitor on AWS. Register the domains you care about; CertWatch checks their certificates every day and emails you before one expires.
- Built: a domain CRUD API on API Gateway (HTTP API), Lambda and DynamoDB, and daily certificate checks through EventBridge Scheduler with SNS email alerts, all defined with AWS SAM and tested against LocalStack.
- Next: deployment to AWS (dev stage) with smoke tests, then CI/CD through GitHub Actions with OIDC, so no AWS keys are stored.
- Operable from day one: an IAM role per function, JSON logs kept for 14 days, X-Ray tracing, and secret scanning on every commit.
- Decisions on record: eight architecture decision records, seven accepted and one proposed for the next phases; the first seven are also presented as a 19-slide ADR deck.
- AWS SAM
- Python
- API Gateway
- Lambda
- DynamoDB
- EventBridge
- SNS
- LocalStack
