Module 5: Cloud Security & Observability: Guided Labs

Lab 1: Threat Model and Control Test

Map assets/trust boundaries, apply STRIDE, rank risks, implement three controls, and test both prevention and detection.

Lab 2: Secret Lifecycle

Deliver a secret without git/static CI keys, rotate it while serving traffic, revoke the old value, and inspect audit evidence.

Lab 3: Telemetry Correlation

Instrument one request with structured logs, metrics, and trace context through API and worker. Diagnose an injected latency fault.

Lab 4: SLO Alert and Runbook

Create an error-budget alert, trigger it safely, execute the runbook, verify recovery, and revise unclear steps.

Evidence: threat model, control tests, rotation log, correlated telemetry, alert, and runbook rehearsal.