Secure 2-Tier AWS Infrastructure with Terraform

Built a modular VPC with public NGINX proxies behind an internet-facing ALB and private Flask backends behind an internal ALB; implemented NAT, route tables, and tightly scoped security groups across all layers.

Automated deployment using Terraform with local, remote, and file provisioners, securely configured backend instances via SSH access tunneled through the public proxy servers.