secrets management – Mobile Faculty

Program Profesional – Sertifikasi Nasional BNSP (Skema Ahli Cloud Computing) memvalidasi kompetensi Anda dalam merancang, membangun, mengamankan, mengoperasikan, dan mengoptimasi arsitektur cloud (IaaS, PaaS, SaaS) pada skala produksi. Kurikulum diselaraskan dengan praktik terbaik industri dan format asesmen BNSP, sehingga peserta siap lolos uji kompetensi dengan portofolio nyata: diagram arsitektur, modul Infrastructure as Code (IaC), pipeline CI/CD, manifest Kubernetes, runbook SRE, dan dashboard observabilitas. Pelaksanaan offline (opsi online by request). Biaya Rp7.600.000 termasuk hotel/penginapan & makan; minimal 8 peserta. Pendahuluan Cloud bukan hanya tempat memindahkan beban kerja, tetapi platform operasional yang menuntut disiplin keamanan, keandalan, efisiensi biaya, dan kecepatan rilis. Program ini memandu alur end-to-end: desain → implementasi → otomasi (IaC) → orkestrasi kontainer → observabilitas → tata kelola & biaya → DR & kepatuhan.Semua artefak praktik dihasilkan dan dibereskan agar siap audit saat asesmen BNSP. Unit Kompetensi (Cakupan Materi Inti) Arsitektur Cloud & Well-Architected – IaaS/PaaS/SaaS, shared responsibility, trade-off desain. Containerization & Orkestrasi – Docker image, Kubernetes (Deployment, Service, Ingress, HPA). Jaringan & Keamanan Cloud – VPC/subnet/route, IAM least privilege, enkripsi, secret management. Penyimpanan & Data Terelola – objek/blok/file, managed DB, backup/snapshot, lifecycle. Infrastructure as Code (IaC) – Terraform/CloudFormation, modul, state, policy-as-code. CI/CD & Automasi – build–test–deploy, blue/green, rolling update, canary. Monitoring & Observability – metrics, logs, traces, SLO/SLI, alerting, error budget. Optimasi Biaya & Tata Kelola – tagging, rightsizing, budgets, laporan biaya, governance. High Availability & Disaster Recovery – multi-AZ/region, RTO/RPO, failover. Kepatuhan & Audit – audit trail, kontrol akses, compliance evidence. Contoh Studi Kasus (dengan coding) Konteks: Sebuah e-commerce ingin platform katalog produk yang elastis, aman, dan hemat biaya. Solusi: microservice pada Kubernetes terkelola, autoscaling, dipantau, dan dideploy via IaC + CI/CD. 1) Cuplikan IaC (Terraform – ringkas) Simpan kredensial di environment variable; hindari hard-code. terraform { required_providers { aws = { source = "hashicorp/aws" } } } provider "aws" { region = var.aws_region } resource "aws_security_group" "web" { name = "svc-web-sg" vpc_id = var.vpc_id ingress { from_port = 80 to_port = 80 protocol = "tcp" cidr_blocks = ["0.0.0.0/0"] } egress { from_port = 0 to_port = 0 protocol = "-1" cidr_blocks = ["0.0.0.0/0"] } } # Sisa komponen (EKS/NodeGroup/ALB/IAM) dipisah ke modul agar reusable & auditable. 2) Manifest Kubernetes (Deployment + Service) apiVersion: apps/v1 kind: Deployment metadata: { name: catalog-svc } spec: replicas: 3 selector: { matchLabels: { app: catalog } } template: metadata: { labels: { app: catalog } } spec: containers: - name: app image: ghcr.io/org/catalog:1.0.0 ports: [{ containerPort: 8080 }] resources: requests: { cpu: "100m", memory: "128Mi" } limits: { cpu: "500m", memory: "512Mi" } envFrom: - secretRef: { name: catalog-secrets } readinessProbe: { httpGet: { path: /health, port: 8080 }, initialDelaySeconds: 5 } livenessProbe: { httpGet: { path: /health, port: 8080 }, initialDelaySeconds: 15 } --- apiVersion: v1 kind: Service metadata: { name: catalog } spec: selector: { app: catalog } ports: [{ port: 80, targetPort: 8080 }] type: LoadBalancer 3) Horizontal Pod Autoscaler (HPA) apiVersion: autoscaling/v2 kind: HorizontalPodAutoscaler metadata: { name: catalog-hpa } spec: scaleTargetRef: { apiVersion: apps/v1, kind: Deployment, name: catalog-svc } minReplicas: 3 maxReplicas: 10 metrics: - type: Resource resource: { name: cpu, target: { type: Utilization, averageUtilization: 60 } } Hasil: Aplikasi elastis (HPA), sehat (probe), rahasia aman (Secret), terekspos LoadBalancer, dan seluruh stack dikelola sebagai kode—memudahkan replikasi, review, dan audit saat uji kompetensi. Silabus (2 Hari Pelatihan + 1 Hari Uji Kompetensi) Hari Sesi Materi Utama Output Praktik 1 Pagi Prinsip & Arsitektur Cloud (IaaS/PaaS/SaaS, shared responsibility) Landing zone + diagram arsitektur 1 Siang Jaringan & Keamanan (VPC, IAM, enkripsi, secret) VPC mini + kebijakan IAM least privilege 1 Sore Storage & Managed DB (backup/snapshot/lifecycle) Rencana backup/restore terdokumentasi 2 Pagi IaC (Terraform modul, state, policy-as-code) Modul Terraform untuk networking/compute 2 Siang Kubernetes & CI/CD Deployment, Service, HPA + pipeline build–deploy 2 Sore Observabilitas, Biaya, & DR Dashboard monitoring + budget alert + runbook DR 3 Pagi Uji Teori (format BNSP) Studi kasus arsitektur & keamanan 3 Siang Uji Praktik & Wawancara Deploy end-to-end + verifikasi portofolio Rincian Unit Kompetensi & Uraian Tugas Perancangan Arsitektur Cloud – pemetaan kebutuhan, pemilihan layanan, dokumentasi trade-off. Containerization & Orkestrasi – membangun image, Deployment/Service/Ingress, autoscaling, rolling update. Keamanan & Jaringan – rancangan VPC/subnet/route, IAM least privilege, enkripsi, secret management. Layanan Data & Storage – pemilihan storage, backup/restore, replikasi, lifecycle policy. IaC & Otomasi – desain modul Terraform, pengelolaan state, policy-as-code, integrasi CI/CD. Observabilitas & Keandalan – metrics/logs/traces, SLO/SLI, alerting, chaos drill. Optimasi Biaya & Tata Kelola – tagging, rightsizing, reserved/savings plan, budgets & laporan biaya. DR & Kepatuhan – RTO/RPO, failover, incident response, audit evidence. Kesimpulan Kami menyelenggarakan Pelatihan & Sertifikasi BNSP – Ahli Cloud Computing (Profesional) secara offline dengan harga Rp7.600.000—termasuk hotel/penginapan & makan, minimal 8 peserta.Selengkapnya & pendaftaran: https://mobilefaculty.com/skema-sertifikasi-bidang-komputer/