Ajith Manmadhan

Pipeline for running untrusted tenant code safely: uploads land in a quarantine bucket, GuardDuty scans the data, and the code executes inside a sealed AWS Lambda MicroVM with no internet access, a logs-only role, and hard resource limits. Only clean, validated output is promoted to the trusted bucket. Defense in depth, managed end-to-end with Terraform.

End-to-end distributed tracing across an async SQS boundary, where traces normally break. The producer injects trace context into SQS message attributes; the consumer extracts it per message and links child spans back to the original request — including batches, legacy messages, and error reporting. Built with AWS Distro for OpenTelemetry and CloudWatch Application Signals.

Usage-based billing engine handling event ingestion, deduplication (Redis SET NX), aggregation (ClickHouse), tiered pricing, fraud detection (Z-score + cosine similarity on hourly vectors), and Stripe invoice generation. Includes production architecture mapping to AWS (API Gateway, Lambda, Kinesis, ElastiCache, S3, EventBridge).

Production-grade webhook ingestion system with replay capabilities using AWS Kinesis Data Streams. Treats Kinesis as immutable event log to enable time-travel replay and subscription state recovery for payment webhooks.

Autonomous AI agent built with AWS Bedrock AgentCore that identifies at-risk customers and proactively offers personalized retention deals through natural conversation.

Production-grade reliability patterns for payment systems: exponential backoff with jitter, bounded queues, and idempotency. Built from AWS Builders' Library patterns.

Event-driven SNS → SQS fan-out on AWS with Lambdas for publishing, DynamoDB persistence, and S3 archiving; Terraform-managed VPC, endpoints, and observability.

Serverless data analytics pipeline using S3, Glue, Athena, and QuickSight to analyze customer churn; Terraform for reproducible infrastructure.