Digital Signage DevOps & AWS IoT OTA Deployment

Built a production-ready digital signage system by codifying AWS infrastructure with Pulumi and building GitHub Actions CI/CD plus an AWS IoT Core-based device OTA update pipeline, automating the full deployment path from server applications to remote software updates on field signage devices (Android).

Architecture

Side Project Advertising

2025.11 - Present

S Media

Tech Stack

AWS AWS IoT Tailscale Pulumi MQTT GitHub Actions Docker SonarQube Trivy

Highlights

Codified AWS infrastructure with Pulumi (multi-env dev/staging/prod)
Built device OTA pipeline on AWS IoT Core (MQTT, Jobs, Device Shadow)
Automated tag release to S3 manifest to IoT Job remote deployment via GitHub Actions
Built device Fleet Console (multi-signal connection monitoring via Tailscale + AWS IoT, offline alerts, OTA rollout)
GitHub Actions CI/CD with DevSecOps (SonarQube, Trivy)

Key Tasks

Infrastructure (Pulumi IaC)

Codified AWS infrastructure with Pulumi (IoT, S3, IAM, network)
Multi-environment stack separation (dev/staging/prod)
Least-privilege IAM policy design (dedicated provisioning user)

CI/CD Pipeline

GitHub Actions build/deploy automation
Branch/tag-based deployment strategy (dev/staging/prod)
Spring Boot/Vite app containerization and deployment
Deployment notification integration (Slack/Discord)

AWS IoT OTA Deployment

Built device remote update (OTA) infrastructure on AWS IoT Core
MQTT (mTLS) connectivity, IoT Job-based deployment commands
S3 manifest publishing and versioned artifact distribution
GitHub Actions tag-push release pipeline integration

Device Fleet Operations & Monitoring

Built Fleet Console (correlates Tailscale reachability + AWS IoT presence)
Offline device alerts (Discord)
OTA rollout execution (canary to staged deployment)

DevSecOps

SonarQube code quality integration
Trivy container vulnerability scanning
Security scan automation pipeline

삶을 기록하는 두 축

Architecture