Skip to main content

Module 5: Cloud Security & Observability: Worked Examples

Example 1: Threat-Model the Delivery Path​

Trace developer, source host, CI runner, artifact registry, deploy identity, cluster, and workload. Apply STRIDE to trust-boundary crossings. Prioritize stolen CI identity, artifact substitution, secret exposure, and excessive workload privilege with specific preventive and detective controls.

Example 2: Follow a Secret​

Document creation, storage, authorization, delivery, memory/log exposure, rotation, revocation, and audit. “Stored in a secret manager” answers only one lifecycle step. Verify the old credential stops working after rotation.

Example 3: Alert on User Harm​

Page on sustained SLO burn for failed or slow user operations; use CPU and queue depth as diagnostic signals. Every page links to an owned runbook with verification, mitigation, rollback, escalation, and recovery checks.

Completion Standard​

  • Produce a threat model with tested controls.
  • Rehearse secret rotation and revocation.
  • Trigger an actionable alert and follow its runbook to recovery.