kushagra.work

Kushagra Agarwal

DevOps Engineer

Building the path from code to production.

Explore the work Explore delivery architecture

01 / MY WORK

What I work on

All projects

02 / APPLICATION DELIVERY

Delivery architecture & safety gates

PRODUCTION TOPOLOGY INSPECTORAWS ECS · OIDC · ZERO-DOWNTIME ROLLING DEPLOYMENT

Production delivery architecture

Click any 3D station to inspect architectural decisions, or test how automated safety gates intercept regressions before reaching production.

Release Scenario
Zero-downtime rolling update with passed health checks
Pre-deploy schema task failure blocks ECS service update
READY TO EXPLORE
Your next release starts here.

Follow the image from build to deployment, or see why a migration failure stops the release.

  1. 01Buildwaiting
  2. 02Registrywaiting
  3. 03Migratewaiting
  4. 04Deploywaiting
  5. 05Notifywaiting
ACTIVE 3D STATION SPECIFICATION

01 · GitHub Actions

GitHub Actions · AWS IAM OIDC

ARCHITECTURAL RATIONALE

Using AWS IAM OIDC federation ensures the CI runner receives short-lived, strictly scoped credentials rather than persisting permanent credentials in GitHub secrets.

PRODUCTION SAFEGUARDS
  • Zero static AWS secrets: Ephemeral IAM OIDC federation eliminates long-lived repository keys
  • BuildKit cache backend: Caches intermediate layers to accelerate CI cycle times
  • Security hardening: Non-root container UID (10001) and automated secret scan on PR
FAILURE MODE & CIRCUIT BREAKER

Pre-commit linting and container vulnerability scanning fail the build before artifacts leave the runner.

Production reference deployment powered by AWS ECS, Application Load Balancers, and GitHub Actions CI/CD.

GitHub Actions. Push and pull-request events for an environment branch trigger GitHub Actions with short-lived AWS IAM OIDC roles. The runner builds container images from the existing Dockerfiles.

OIDC roles Systems Manager Secrets Manager

View complete ECS delivery case study

03 / BACKGROUND

Experience & contact

Explore my experience or get in touch about my work.

Get in touch Full experience

CURRENT ROLE · May 2026 – Present

DevOps Engineer

AWS infrastructure, delivery automation, and operational reliability for business applications.