Worked on the phuhung273/aws-cdk repository to enhance S3 asset deployment by introducing support for custom security groups within BucketDeploymentProps. This addition allowed users to specify granular network security controls for Lambda functions handling asset deployments, addressing compliance and security requirements. The implementation maintained backward compatibility while expanding the module’s flexibility. Comprehensive unit and integration tests were developed to validate the new securityGroups logic, improving overall test coverage and reliability. Documentation was updated to guide users on configuring VPC, subnets, and security groups. The work leveraged AWS CDK, TypeScript, and cloud infrastructure expertise to deliver robust, secure deployment workflows.