AWS architecture — from trading infra to home automation.
Two very different clients, the same serverless playbook: event-driven Lambda functions, managed queues and tables instead of always-on servers, secrets out of code, and infrastructure defined entirely in CloudFormation.
Multi-account orchestrator provisions gateways from Secrets Manager; per-account executors via systemd.
AWS control plane — API Gateway, Lambda, SQS FIFO, DynamoDB, SSM — defined in CloudFormation, with CloudWatch/SNS alerting.
v2 re-architecture: per-account ECS services (IB Gateway + executor containers) managed by a reconciler Lambda; Cloud Map DNS-SRV service discovery that cut ~150–190 ms per signal; per-hop latency breadcrumbs; zero long-lived IAM keys.
3-way trade reconciliation (TradingView trade ↔ signal ↔ broker fill) with continuous-contract symbol normalization, plus a CloudFront-hosted ops dashboard and standby/wake cost controls.
Migrated two always-on Python polling services into an event-driven AWS Lambda architecture — 8 functions on Python 3.12, defined and deployed with AWS SAM / CloudFormation.
API Gateway HTTP API + Smoobu webhooks create/update/cancel guest reservations in real time; EventBridge Scheduler drives every time-based job (Nuki PIN provisioning, invoicing, check-in detection, cleaning checks, eTurizem regulatory reporting) with native Europe/Berlin DST handling.
Replaced in-memory dictionaries and a SQLite guest database with 3 DynamoDB tables (reservation state, guest de-duplication, eTurizem sequence counters).
Moved every third-party API token (Smoobu, Nuki, Cebelca, eTurizem, CallMeBot) into AWS Secrets Manager — no more hardcoded credentials.
S3 archives invoice PDFs, replacing an rclone→Dropbox pipeline; WhatsApp alerts via CallMeBot replace SMS. Runs almost entirely inside the AWS free tier (well under $1/month).