Module 3: Cloud Deployment & CI/CD: Guided Labs

Lab 1: Clean-Room Environment

From an empty state, provision or locally reproduce the runtime, deploy the pinned artifact, run migrations safely, and pass smoke tests.

Lab 2: Trusted Pipeline

Build once, test/scan, attach provenance or SBOM, promote by digest, and use scoped short-lived deployment identity.

Lab 3: Release and Rollback

Run a staged release with health criteria. Inject a regression and execute rollback, including data-compatibility checks.

Lab 4: Cost and Teardown

Estimate cost or document local avoidance, enforce alerts/TTL where applicable, destroy the environment, and verify no chargeable remnants.

Evidence: code, pipeline, identity policy, deployment record, rollback timing, and teardown proof.