policy as code cloud – Mobile Faculty

Program Resmi Sertifikasi Nasional BNSP – Skema Ahli Cloud Computing memvalidasi kompetensi profesional Anda untuk merancang, membangun, mengamankan, mengoperasikan, dan mengoptimasi arsitektur cloud (IaaS, PaaS, SaaS) di lingkungan produksi. Kurikulum kami selaras praktik terbaik industri dan pola asesmen BNSP; peserta akan menghasilkan portofolio nyata (diagram arsitektur, modul Infrastructure as Code, manifest Kubernetes, runbook SRE, dan dashboard observabilitas) yang siap ditunjukkan saat uji. Pelaksanaan offline (tatap muka). Biaya Rp7.600.000 — sudah termasuk hotel/penginapan & makan; minimal 8 peserta. Pendahuluan Cloud bukan sekadar lift-and-shift. Keberhasilan implementasi bergantung pada desain andal, keamanan ketat, observabilitas menyeluruh, dan efisiensi biaya. Program ini memandu Anda end-to-end: desain → implementasi → otomasi (IaC) → orkestrasi kontainer → observabilitas → tata kelola & biaya → DR & kepatuhan, dengan fokus hands-on agar siap menghadapi asesmen BNSP dan kebutuhan produksi. Unit Kompetensi (Cakupan Materi) Arsitektur Cloud & Model Layanan – IaaS/PaaS/SaaS, shared responsibility, well-architected. Virtualisasi & Container – Docker (image, registry, image scanning). Orkestrasi Kubernetes – Deployment, Service/Ingress, HPA, rolling update. Jaringan & Keamanan – VPC/subnet/route, IAM least privilege, enkripsi, secrets management. Penyimpanan & Data Terkelola – objek/blok/file, managed DB, backup/snapshot, lifecycle. Infrastructure as Code (IaC) – Terraform/CloudFormation (modul, state, policy-as-code). CI/CD & Otomasi Rilis – pipeline build–test–deploy, blue/green, canary. Monitoring, Logging & Observabilitas – metrics, traces, alerting, SLO/SLI. Optimasi Biaya & Tata Kelola – tagging, rightsizing, budgets, laporan biaya, governance. High Availability, DR & Kepatuhan – multi-AZ/region, RTO/RPO, failover, audit trail. Contoh Studi Kasus (dengan coding) Konteks: Sebuah e-commerce ingin men-deploy layanan katalog produk pada Kubernetes terkelola yang elastis, aman, dan termonitor, serta dapat di-deploy otomatis via IaC. 1) Cuplikan IaC (Terraform — ringkas) Simpan kredensial sebagai environment variable; hindari hard-code di repo. terraform { required_providers { aws = { source = "hashicorp/aws" } } } provider "aws" { region = var.aws_region } resource "aws_security_group" "web" { name = "svc-web-sg" vpc_id = var.vpc_id ingress { from_port = 80 to_port = 80 protocol = "tcp" cidr_blocks = ["0.0.0.0/0"] } egress { from_port = 0 to_port = 0 protocol = "-1" cidr_blocks = ["0.0.0.0/0"] } } # Komponen lain (EKS/NodeGroup/ALB/IAM) dipisah ke modul agar reusable & auditable. 2) Manifest Kubernetes (Deployment + Service) apiVersion: apps/v1 kind: Deployment metadata: { name: catalog-svc } spec: replicas: 3 selector: { matchLabels: { app: catalog } } template: metadata: { labels: { app: catalog } } spec: containers: - name: app image: ghcr.io/org/catalog:1.0.0 ports: [{ containerPort: 8080 }] resources: requests: { cpu: "100m", memory: "128Mi" } limits: { cpu: "500m", memory: "512Mi" } readinessProbe: { httpGet: { path: /health, port: 8080 }, initialDelaySeconds: 5 } livenessProbe: { httpGet: { path: /health, port: 8080 }, initialDelaySeconds: 15 } --- apiVersion: v1 kind: Service metadata: { name: catalog } spec: selector: { app: catalog } ports: [{ port: 80, targetPort: 8080 }] type: LoadBalancer 3) Horizontal Pod Autoscaler (HPA) apiVersion: autoscaling/v2 kind: HorizontalPodAutoscaler metadata: { name: catalog-hpa } spec: scaleTargetRef: { apiVersion: apps/v1, kind: Deployment, name: catalog-svc } minReplicas: 3 maxReplicas: 10 metrics: - type: Resource resource: { name: cpu, target: { type: Utilization, averageUtilization: 60 } } Hasil: Layanan elastis (HPA), sehat (probe), terekspos aman via LoadBalancer, dan seluruh stack terdokumentasi sebagai kode—mudah direplikasi, ditinjau, dan diaudit saat uji kompetensi. Silabus (2 Hari Pelatihan + 1 Hari Uji Kompetensi) Hari Sesi Materi Utama Output Praktik 1 Pagi Prinsip & Arsitektur Cloud (IaaS/PaaS/SaaS, shared responsibility) Landing zone + diagram arsitektur 1 Siang Jaringan & Keamanan (VPC, IAM, enkripsi, secrets) VPC mini + kebijakan IAM least privilege 1 Sore Storage & Managed DB (backup/snapshot/lifecycle) Rencana backup/restore terdokumentasi 2 Pagi IaC (Terraform: modul, state, policy-as-code) Modul Terraform untuk networking/compute 2 Siang Kubernetes & CI/CD Deployment, Service, HPA + pipeline build–deploy 2 Sore Observabilitas, Biaya, & DR Dashboard monitoring + budget alert + runbook DR 3 Pagi Uji Teori (format BNSP) Studi kasus arsitektur & keamanan 3 Siang Uji Praktik & Wawancara Deploy end-to-end + verifikasi portofolio Rincian Unit Kompetensi & Uraian Tugas Perancangan Arsitektur Cloud – kaji kebutuhan, pilih layanan, susun trade-off & dokumentasi. Containerization & Orkestrasi – bangun image, Deployment/Service/Ingress, autoscaling, rolling update. Keamanan & Jaringan – desain VPC/subnet/route, IAM least privilege, enkripsi, secrets management. Layanan Data & Storage – tipe storage, backup/restore, replikasi, lifecycle policy. IaC & Otomasi – modul Terraform, pengelolaan state, policy-as-code, integrasi CI/CD. Observabilitas & Keandalan – metrics/logs/traces, SLO/SLI, alerting, chaos drill. Optimasi Biaya & Tata Kelola – tagging, rightsizing, reserved/savings plan, budgets & laporan biaya. DR & Kepatuhan – RTO/RPO, failover, incident response, audit evidence. Kesimpulan Kami menyediakan Pelatihan & Sertifikasi BNSP – Skema Ahli Cloud Computing secara offline dengan harga murah Rp7.600.000—termasuk hotel/penginapan & makan, minimal 8 peserta.Detail program & pendaftaran: https://mobilefaculty.com/skema-sertifikasi-bidang-komputer/