Secure VPC Network Architecture with NAT & Bastion

Designed a secure AWS VPC with subnet segmentation, cost-aware NAT Gateway, and a Bastion Host — deployed using AWS CDK (TypeScript).

August 30, 2025