---
title: "GCP & AWS Infrastructure with Terraform — Tran Manh Tuan"
description: "Google Cloud and AWS infrastructure with Terraform, Cloud Run, IAM, Secret Manager, CI/CD and monitoring."
canonical: "https://tmtuan.dev/en/services/gcp-cloud-infrastructure"
language: "en"
image: "https://tmtuan.dev/_img/og/default.5d198072-og.jpg"
tokens: 1149
---

# GCP & Cloud Infrastructure

Infrastructure on GCP and AWS, defined in Terraform so that what is running can be read, reviewed and rebuilt.

Infrastructure that only exists as clicks in a console is infrastructure nobody can review and nobody can reproduce. Putting it in Terraform is not about the tool — it is about being able to answer “what is actually deployed, and who changed it?” without guessing.

The parts that tend to get skipped are the ones I start with: who can access what (IAM), where secrets live and who can read them, what the pipeline does before something reaches production, and what you will see when it breaks.

## Typical engagements

- Moving existing infrastructure into Terraform without downtime
- Cloud Run, container build and deployment pipelines on GCP
- IAM review and secret handling with Secret Manager
- CI/CD pipelines, logging and monitoring for an existing system

## Related work

- [Dr.Well-B](https://tmtuan.dev/en/projects/dr-well-b)

  Multi-service platform for doctors and dentists in Japan: verified membership with approvals, profile-targeted ads, dynamic surveys, job search and batch reward points.

- [GO Inc](https://tmtuan.dev/en/projects/go-inc)

  An ecosystem of 4 websites for the GO taxi brand — a 5-language product site, ATS-connected recruiting, a support center and corporate IR, with Slack-moderated publishing on Google Cloud + AWS.

- [Wonderia](https://tmtuan.dev/en/projects/wonderia)

  The multilingual brand website of Wonderia YOKOHAMA (wonderia.jp) — 4 languages, marketing self-publishing via Contentful, running serverless on Google Cloud.

- [Yokohama Stadium](https://tmtuan.dev/en/projects/yokohama-stadium)

  The official website of Yokohama Stadium (Hamasta) with a live play-by-play system — static-first on a CDN, event-driven serverless pipeline on Google Cloud and AWS.

- [Corporate IR Platform](https://tmtuan.dev/en/projects/corporate-ir-platform)

  A corporate and IR website platform for a listed Japanese company — a fully self-built CMS, a Firestore-to-BigQuery data pipeline, and Google Cloud infrastructure behind a WAF.

- [Beacon-based Content Delivery Platform](https://tmtuan.dev/en/projects/beacon-content-platform)

  A multi-tenant BLE/iBeacon advertising platform that recorded 761,921 device connections in a single hour while matching campaigns and delivering context-aware content.

- [How I Traced a Googlebot-only HTTP 500 Across Next.js, Cloud Run and the Hosting Edge](https://tmtuan.dev/en/articles/googlebot-500-firebase-hosting-nextjs)

  Users and every other crawler got 200 while Googlebot got 500 site-wide. The cause: a 404-path regression amplified by crawler verification at the hosting edge.

## Technologies used in this work

- TypeScript
- BigQuery
- Cloud Run
- Docker
- Node.js
- Contentful
- Express
- Firebase Hosting
- Firestore
- Github Action
- Nuxt
- reCAPTCHA
- Cloud Storage
- Firebase Auth
- Gitleaks
- Next.js

## Is this a fit?

- A good fit: business systems, backends and APIs, GCP and AWS infrastructure, production incidents.
- Not the right fit: work that is mainly pixel-perfect UI or heavy animation.

If this sounds like the problem you have, [Send a project brief](mailto:tmtuan801@gmail.com?subject=Project%20inquiry%20%E2%80%94%20tmtuan.dev&body=Project%20type%3A%20custom%20business%20system%20%2F%20web%20platform%20%2F%20cloud%20%26%20DevOps%20%2F%20production%20issue%20%2F%20other%0D%0A%0D%0AWhat%20needs%20to%20be%20built%20or%20fixed%3A%0D%0A%0D%0ACurrent%20stack%20(if%20any)%3A%0D%0A%0D%0ATimeline%3A%0D%0A%0D%0ABudget%20range%20(optional)%3A%0D%0A).

Your email app opens with a short brief to fill in.

## Structured data (JSON-LD)

```json
{"@context":"https://schema.org","@graph":[{"@type":"WebPage","@id":"https://tmtuan.dev/en/services/gcp-cloud-infrastructure#webpage","url":"https://tmtuan.dev/en/services/gcp-cloud-infrastructure","name":"GCP & AWS Infrastructure with Terraform","description":"Google Cloud and AWS infrastructure with Terraform, Cloud Run, IAM, Secret Manager, CI/CD and monitoring.","inLanguage":"en","isPartOf":{"@id":"https://tmtuan.dev/#website"},"about":{"@id":"https://tmtuan.dev/#person"}},{"@type":"Service","@id":"https://tmtuan.dev/en/services/gcp-cloud-infrastructure#service","name":"GCP & Cloud Infrastructure","description":"Google Cloud and AWS infrastructure with Terraform, Cloud Run, IAM, Secret Manager, CI/CD and monitoring.","url":"https://tmtuan.dev/en/services/gcp-cloud-infrastructure","serviceType":"GCP & Cloud Infrastructure","provider":{"@id":"https://tmtuan.dev/#person"}}]}
```