How do you manage AWS infrastructure in your projects?

I manage AWS infrastructure using Infrastructure as Code (IaC) to ensure repeatability and version control. For most projects I use Terraform, sometimes the AWS CDK for higher‑level abstractions. I define resources such as VPCs, subnets, security groups, RDS instances, and ECS clusters in modules. Tags are applied consistently for cost allocation and compliance. I enable CloudTrail and Config to audit changes, and use CloudWatch and X‑Ray for monitoring. For cost optimization, I review Reserved Instances and Savings Plans, and I automate the shutdown of non‑production resources during off‑hours. Security is enforced via IAM roles with least privilege, and secrets are stored in AWS Secrets Manager or Parameter Store. I also set up automated drift detection and remediation pipelines to keep the environment in sync with the code.