Mauricio Ignacio Pastora

AWS Infrastructure: The application leverages AWS services for scalability and security. The React frontend is hosted in an S3 bucket and delivered globally via CloudFront, with Route 53 managing DNS. The backend runs on an EC2 instance inside a VPC, connected to an RDS PostgreSQL database. Security Groups enforce strict firewall rules, and Cognito manages user authentication. A Pre-Signup Lambda trigger validates email domains (blocking disposable or unauthorized domains) and logs actions to CloudWatch. This setup provides a secure, high-performance foundation with managed hosting and authentication. Frontend Architecture: The frontend is built with React and TypeScript, using Vite for fast builds and SWR for efficient data fetching. A component-based design with TailwindCSS ensures reusable, responsive UI elements. State is managed via React Hooks and the Context API, including an authentication context tied to Cognito. This architecture delivers a performant and adaptive interface with seamless user session handling. Backend Architecture: The backend uses Flask with a RESTful API backed by PostgreSQL via SQLAlchemy. It follows clean REST principles, returning JSON responses with proper status codes. Authentication relies on Cognito-issued JWT tokens, reducing the need for custom auth logic. SQLAlchemy’s parameterized queries and input normalization protect against SQL injection, while the modular design simplifies database interactions and scaling. Deployment Pipeline: CI/CD is powered by GitHub Actions, automating builds and deployments. Frontend changes are built with Vite and synced to S3, followed by CloudFront cache invalidation. Backend updates are deployed to EC2 via SSH with automatic dependency installation and service restarts. Environment variables and GitHub Secrets manage sensitive configurations for dev, staging, and production environments. Security Features: All traffic runs over HTTPS with SSL certificates from AWS Certificate Manager. The RDS database is in a private subnet, and Security Groups restrict inbound access. CORS is configured on the Flask API to allow the frontend domain while blocking unauthorized origins. Cognito secures authentication and session management, while SQLAlchemy and input sanitization mitigate injection risks. Sensitive credentials are stored securely in AWS and GitHub Secrets.