Skip to main content

Module 5: Cloud Security & Observability: Guided Labs

Lab 1: Threat Model and Control Test​

Map assets/trust boundaries, apply STRIDE, rank risks, implement three controls, and test both prevention and detection.

Lab 2: Secret Lifecycle​

Deliver a secret without git/static CI keys, rotate it while serving traffic, revoke the old value, and inspect audit evidence.

Lab 3: Telemetry Correlation​

Instrument one request with structured logs, metrics, and trace context through API and worker. Diagnose an injected latency fault.

Lab 4: SLO Alert and Runbook​

Create an error-budget alert, trigger it safely, execute the runbook, verify recovery, and revise unclear steps.

Evidence: threat model, control tests, rotation log, correlated telemetry, alert, and runbook rehearsal.

Required evidence extension​

Complete Secret rotation and telemetry evidence and its assessment. The 22–32-hour package is integrated with the original labs; use the semester workload contract for totals.