pelatihan bnsp container security

Program Resmi – Sertifikasi Keahlian Cloud Computing (BNSP) memvalidasi kemampuan profesional Anda dalam merancang, membangun, mengamankan, mengoperasikan, dan mengoptimasi arsitektur cloud (IaaS, PaaS, SaaS) yang siap produksi. Kurikulum dirancang selaras praktik terbaik industri dan skema asesmen BNSP, dengan fokus hands-on serta portofolio: diagram arsitektur, modul Infrastructure as Code (IaC), manifest Kubernetes, runbook SRE, dan dashboard observabilitas.Pelaksanaan offline (opsi online by request). Biaya Rp7.600.000 – termasuk hotel/penginapan & makan; minimal 8 peserta. Pendahuluan Keunggulan cloud tidak otomatis hadir hanya dengan migrasi. Diperlukan desain yang andal, keamanan ketat, observabilitas menyeluruh, dan kontrol biaya. Program ini memandu alur end-to-end: desain → implementasi → otomasi (IaC) → orkestrasi kontainer → observabilitas → tata kelola & biaya → DR & kepatuhan, sekaligus menyiapkan bukti kompetensi yang siap diperiksa saat asesmen BNSP. Unit Kompetensi (Cakupan Materi) Arsitektur Cloud & Model Layanan – IaaS/PaaS/SaaS, shared responsibility, well-architected. Virtualisasi & Container – Docker image/registry, image scanning. Orkestrasi Kubernetes – Deployment, Service/Ingress, HPA, rolling update. Jaringan & Keamanan – VPC/subnet/route, IAM least privilege, enkripsi, secret management. Penyimpanan & Data Terkelola – objek/blok/file, managed DB, backup/snapshot, lifecycle. Infrastructure as Code (IaC) – Terraform/CloudFormation (modul, state, policy-as-code). CI/CD & Otomasi Rilis – build–test–deploy, blue/green, canary. Monitoring, Logging & Observabilitas – metrics, traces, alerting, SLO/SLI. Optimasi Biaya & Tata Kelola – tagging, rightsizing, budgets, laporan biaya, governance. High Availability, DR & Kepatuhan – multi-AZ/region, RTO/RPO, failover, audit trail. Contoh Studi Kasus (dengan coding) Konteks: Perusahaan ritel ingin men-deploy microservice katalog produk pada Kubernetes terkelola yang elastis, aman, dan termonitor, serta deploy otomatis via IaC. 1) Cuplikan IaC (Terraform — ringkas) Simpan kredensial via environment variable; hindari hard-code. terraform { required_providers { aws = { source = "hashicorp/aws" } } } provider "aws" { region = var.aws_region } resource "aws_security_group" "web" { name = "svc-web-sg" vpc_id = var.vpc_id ingress { from_port = 80 to_port = 80 protocol = "tcp" cidr_blocks = ["0.0.0.0/0"] } egress { from_port = 0 to_port = 0 protocol = "-1" cidr_blocks = ["0.0.0.0/0"] } } # EKS/NodeGroup/ALB/IAM dikelola via modul terpisah agar reusable & auditable. 2) Manifest Kubernetes (Deployment + Service) apiVersion: apps/v1 kind: Deployment metadata: { name: catalog-svc } spec: replicas: 3 selector: { matchLabels: { app: catalog } } template: metadata: { labels: { app: catalog } } spec: containers: - name: app image: ghcr.io/org/catalog:1.0.0 ports: [{ containerPort: 8080 }] resources: requests: { cpu: "100m", memory: "128Mi" } limits: { cpu: "500m", memory: "512Mi" } readinessProbe: { httpGet: { path: /health, port: 8080 }, initialDelaySeconds: 5 } livenessProbe: { httpGet: { path: /health, port: 8080 }, initialDelaySeconds: 15 } --- apiVersion: v1 kind: Service metadata: { name: catalog } spec: selector: { app: catalog } ports: [{ port: 80, targetPort: 8080 }] type: LoadBalancer 3) Horizontal Pod Autoscaler (HPA) apiVersion: autoscaling/v2 kind: HorizontalPodAutoscaler metadata: { name: catalog-hpa } spec: scaleTargetRef: { apiVersion: apps/v1, kind: Deployment, name: catalog-svc } minReplicas: 3 maxReplicas: 10 metrics: - type: Resource resource: { name: cpu, target: { type: Utilization, averageUtilization: 60 } } Hasil: Layanan elastis (HPA), sehat (probe), terekspos aman via LoadBalancer, dan seluruh stack terdokumentasi sebagai kode—mudah direplikasi, ditinjau, dan diaudit saat uji kompetensi. Silabus (2 Hari Pelatihan + 1 Hari Uji Kompetensi) Hari Sesi Materi Utama Output Praktik 1 Pagi Prinsip & Arsitektur Cloud (IaaS/PaaS/SaaS, shared responsibility) Landing zone + diagram arsitektur 1 Siang Jaringan & Keamanan (VPC, IAM, enkripsi, secrets) VPC mini + kebijakan IAM least privilege 1 Sore Storage & Managed DB (backup/snapshot/lifecycle) Rencana backup/restore terdokumentasi 2 Pagi IaC (Terraform modul, state, policy-as-code) Modul Terraform untuk networking/compute 2 Siang Kubernetes & CI/CD Deployment, Service, HPA + pipeline build–deploy 2 Sore Observabilitas, Biaya, & DR Dashboard monitoring + budget alert + runbook DR 3 Pagi Uji Teori (format BNSP) Studi kasus arsitektur & keamanan 3 Siang Uji Praktik & Wawancara Deploy end-to-end + verifikasi portofolio Rincian Unit Kompetensi & Uraian Tugas Perancangan Arsitektur Cloud – kaji kebutuhan, pilih layanan, susun trade-off & dokumentasi. Containerization & Orkestrasi – bangun image, Deployment/Service/Ingress, autoscaling, rolling update. Keamanan & Jaringan – desain VPC/subnet/route, IAM least privilege, enkripsi, secret management. Layanan Data & Storage – tipe storage, backup/restore, replikasi, lifecycle policy. IaC & Otomasi – modul Terraform, pengelolaan state, policy-as-code, integrasi CI/CD. Observabilitas & Keandalan – metrics/logs/traces, SLO/SLI, alerting, chaos drill. Optimasi Biaya & Tata Kelola – tagging, rightsizing, reserved/savings plan, budgets & laporan biaya. DR & Kepatuhan – RTO/RPO, failover, incident response, audit evidence. Kesimpulan Kami menyediakan Pelatihan & Sertifikasi BNSP – Skema Ahli Cloud Computing secara offline dengan harga Rp7.600.000—termasuk hotel/penginapan & makan, minimal 8 peserta.Lihat detail & pendaftaran: https://mobilefaculty.com/skema-sertifikasi-bidang-komputer/

Tag: pelatihan bnsp container security

Sertifikasi Keahlian Cloud Computing oleh BNSP