Skip to content
>_higan

@Higan

Nghia Tran Dinh

Cloud & DevSecOps engineer passionate about building secure, scalable systems

View PortfolioRead Blog

Explore

Everything you can find here

FeaturedTechnical Blog

Knowledge Hub

In-depth technical articles on Cloud, DevSecOps, Network and Security. From hands-on labs to real-world system architecture.

Cloud · DevSecOps · Network · Security

Portfolio

Portfolio

Cloud security platforms, DevSecOps pipelines, and infrastructure automation — plus AWS and Scrum certifications verified via Credly.

Projects · Certifications · Credentials

Featured Projects

A selection of notable projects

Cover image for Cloud Security Posture & Incident Response

Cloud Security Posture & Incident Response

AWS CSPM platform that centralizes findings from Security Hub, GuardDuty, Config, Inspector, and a custom IAM posture Lambda — with event-driven safe-mode remediation and a full DevSecOps pipeline gating every deployment.

awssecurity-hubguarddutyterraform
View details
Cover image for Cloud WAFR Accelerator

Cloud WAFR Accelerator

Upload a PDF architecture document and get back automated AWS Well-Architected Framework assessments per pillar — with best-practice citations, risk ratings, and a pre-populated workload in the AWS Well-Architected Tool. Powered by Amazon Bedrock and a 7-step Step Functions state machine.

awsbedrockgenerative-aiwell-architected
View details
View all projects

Featured Posts

Curated technical articles

Cover image for AWS Security Hub vs. Security Hub CSPM: Why Are There Two Services?
Security

AWS Security Hub vs. Security Hub CSPM: Why Are There Two Services?

AWS now has both Security Hub and Security Hub CSPM. This article explains why they exist, how they differ, and when you should use each one.

13 min read
Read post
Cover image for The Silent Cost of NAT Gateways: Why You Should Use 3 VPC Endpoints for ECR & S3
Cloud

The Silent Cost of NAT Gateways: Why You Should Use 3 VPC Endpoints for ECR & S3

Why using NAT Gateways for AWS-internal traffic is a costly architectural mistake, and how deploying 3 specific VPC Endpoints changes the pricing model entirely.

4 min read
Read post
Cover image for ECS on EC2 vs ECS on Fargate: What Should You Choose?
Cloud

ECS on EC2 vs ECS on Fargate: What Should You Choose?

A practical breakdown of how ECS's two launch types actually differ — not just on paper, but in the 2am-pager kind of way.

5 min read
Read post
View all posts

Featured Certifications

Professional certifications achieved

Badge chứng chỉ AWS Certified Security – Specialty

AWS Certified Security – Specialty

Amazon Web Services Training and Certification

Credly
Badge chứng chỉ AWS Certified SysOps Administrator – Associate

AWS Certified SysOps Administrator – Associate

Amazon Web Services Training and Certification

Credly
Badge chứng chỉ Professional Scrum Master™ II (PSM II)

Professional Scrum Master™ II (PSM II)

Scrum.org

Credly
Badge chứng chỉ Professional Scrum Product Owner™ II (PSPO II)

Professional Scrum Product Owner™ II (PSPO II)

Scrum.org

Credly
Badge chứng chỉ AWS Application Networking Demonstrated

AWS Application Networking Demonstrated

Amazon Web Services Training and Certification

Credly
Badge chứng chỉ AWS Incident Response Demonstrated

AWS Incident Response Demonstrated

Amazon Web Services Training and Certification

Credly
View all certifications