Module 2: Infrastructure as Code: Guided Labs

Lab 1: Safe Plan Pipeline

Run format, validate, lint, security/policy scans, and plan review. Reject wildcard privilege, unplanned public exposure, destructive replacement, and unexplained cost growth.

Lab 2: State and Concurrency

Configure remote state and locking or simulate them locally. Attempt concurrent change, then rehearse documented lock/state recovery safely.

Lab 3: Drift and Import

Create controlled out-of-band drift, detect it, choose revert or import, and return to a clean plan without recreating the resource.

Lab 4: Module Upgrade

Build and version a focused module; upgrade a consumer with moved resources or migration notes and prove no unintended replacement.

Evidence: CI output, reviewed plans, recovery log, drift reconciliation, and upgrade test.