Roadmaps

Ends with

Cloud DevOps Capstone

Three microservices in three languages, taken from source to a monitored, GitOps-managed deployment on AWS EKS: Terraform provisions the AWS infrastructure, Ansible configures the build host, Jenkins builds and scans, Argo CD reconciles, Prometheus watches.

Ends with

An AWS account you can defend in review

81 resources from four Terraform modules: a VPC across two availability zones with flow logs and NACLs, EKS with IRSA and KMS envelope encryption, ECR with immutable tags and a lifecycle policy, and a build host with IMDSv2 enforced and no static keys anywhere.

Ends with

A pipeline that can say no

Trivy blocks the push on a fixable CRITICAL, SonarQube gates the merge, and Checkov, Gitleaks and hadolint run before either. In the cluster: the restricted Pod Security Standard, default-deny NetworkPolicies, RBAC per service and secrets that never reach the image.

Ends with

Production workloads on EKS

48 objects rendered by Kustomize and schema-validated: a MySQL StatefulSet on EBS, three Deployments with HPAs and PodDisruptionBudgets, default-deny NetworkPolicies, ALB ingress, and Argo CD sync waves ordering the rollout database-first. The managed counterpart to the kubeadm cluster this path teaches you to build.