8 lab delivery platform và cloud

Lab 01 · Git internals/recovery

Inspect objects/trees/parents/refs/pack; tạo bad rebase/reset, recover qua reflog; bisect regression tự động; so revert với history rewrite.

Lab 02 · CI DAG monorepo

Java services + frontend: affected graph, unit/integration/Testcontainers, reports, cache keys, merge queue simulation và periodic full build.

Lab 03 · Supply-chain artifact

Build image once, SBOM, scan, provenance/sign, publish digest. Promote same digest dev→staging; admission verify signature và reject mutable/untrusted artifact.

Lab 04 · OIDC deployment identity

GitHub environment approval + AWS role hoặc Azure federated credential constrained by repo/ref/environment. Prove fork/branch cannot assume prod; inspect audit logs.

Lab 05 · Canary + migration

Expand-contract schema, deploy mixed versions, backfill checkpoint, canary SLI gate, abort/rollback then forward-fix new data format.

Lab 06 · Terraform state, drift và bastion access

Terraform module cho network+app; remote state/locking, plan policy, provider lock, drift console change, import/moved/reconcile và destructive replacement review. Thiết kế private VM access qua bastion hoặc managed session service: không public SSH/RDP, short-lived per-user identity, session audit và break-glass tabletop.

Lab 07 · AWS architecture

Multi-account landing baseline, VPC public/private across AZ, ALB, workload role, private DB/object storage, logging/budget. Failure drill AZ/NAT/credential/restore.

Lab 08 · Azure architecture & comparison

Management group/subscription/resource groups, VNet/subnets, Front Door/App Gateway, managed identity, data/service bus, Monitor/budget. Map capability to AWS and document semantic/cost differences.

Rubric