security cloud zero trust – Mobile Faculty

Program “Pelatihan Kompetensi dan Sertifikasi BNSP – Ahli Cloud Computing” memvalidasi kemampuan profesional Anda dalam merancang, membangun, mengamankan, dan mengoperasikan sistem cloud (IaaS, PaaS, SaaS) yang andal, aman, efisien, dan skalabel. Kurikulum diselaraskan dengan kebutuhan industri dan format asesmen BNSP, sehingga peserta siap lolos uji kompetensi nasional sambil menghasilkan portfolio proyek nyata. Pelaksanaan offline (opsi online by request). Biaya Rp7.600.000 sudah termasuk hotel/penginapan & makan; minimal 8 peserta. Pendahuluan Adopsi cloud bukan sekadar migrasi workload. Organisasi dituntut memastikan ketangkasan, keamanan, ketersediaan tinggi, observabilitas, serta efisiensi biaya. Program ini menggabungkan konsep, praktik langsung, dan simulasi asesmen BNSP, menuntun Anda melalui alur end-to-end: desain → implementasi → otomasi (IaC) → orkestrasi kontainer → observabilitas → tata kelola & biaya → kesiapsiagaan DR. Unit Kompetensi (Cakupan Materi) Arsitektur Cloud & Model Layanan – IaaS/PaaS/SaaS, shared responsibility, well-architected principles. Virtualisasi, Container & Orkestrasi – Docker (image, registry), Kubernetes (Deployment, Service, HPA). Jaringan & Keamanan Cloud – VPC/subnet/route, IAM, security groups, enkripsi at rest/in transit. Penyimpanan & Basis Data Terkelola – objek/blok/file, managed DB, backup/snapshot, lifecycle policy. Infrastructure as Code (IaC) – Terraform/CloudFormation (modul, state, policy-as-code). CI/CD & Otomasi DevOps – build–test–deploy, blue/green & rolling update. Monitoring, Logging & Observabilitas – metrics, tracing, alerting, SLO/SLI. Optimasi Biaya & Tata Kelola – tagging, rightsizing, budgets, laporan biaya, governance. Ketersediaan Tinggi & DR – multi-AZ/region, RTO/RPO, failover, chaos testing. Kepatuhan & Audit – audit trail, secrets management, least privilege. Contoh Studi Kasus (dengan coding – opsional) Konteks: Perusahaan ritel nasional membutuhkan microservice katalog produk yang berjalan di Kubernetes terkelola, elastis (autoscaling), terukur (observabilitas), dan dideploy one-click via IaC. 1) Infrastructure as Code (Terraform – ringkas) Simpan kredensial sebagai environment variable; jangan hard-code. terraform { required_providers { aws = { source = "hashicorp/aws" } } } provider "aws" { region = var.aws_region } resource "aws_security_group" "web" { name = "svc-web-sg" vpc_id = var.vpc_id ingress { from_port = 80 to_port = 80 protocol = "tcp" cidr_blocks = ["0.0.0.0/0"] } egress { from_port = 0 to_port = 0 protocol = "-1" cidr_blocks = ["0.0.0.0/0"] } } # (EKS, node group, LB) dikelola dalam modul terpisah agar reusable & auditable 2) Manifest Kubernetes (Deployment + Service) apiVersion: apps/v1 kind: Deployment metadata: { name: catalog-svc } spec: replicas: 3 selector: { matchLabels: { app: catalog } } template: metadata: { labels: { app: catalog } } spec: containers: - name: app image: ghcr.io/org/catalog:1.0.0 ports: [{ containerPort: 8080 }] resources: requests: { cpu: "100m", memory: "128Mi" } limits: { cpu: "500m", memory: "512Mi" } readinessProbe: { httpGet: { path: /health, port: 8080 }, initialDelaySeconds: 5, periodSeconds: 10 } livenessProbe: { httpGet: { path: /health, port: 8080 }, initialDelaySeconds: 15, periodSeconds: 20 } --- apiVersion: v1 kind: Service metadata: { name: catalog } spec: selector: { app: catalog } ports: [{ port: 80, targetPort: 8080 }] type: LoadBalancer 3) Horizontal Pod Autoscaler (HPA) apiVersion: autoscaling/v2 kind: HorizontalPodAutoscaler metadata: { name: catalog-hpa } spec: scaleTargetRef: { apiVersion: apps/v1, kind: Deployment, name: catalog-svc } minReplicas: 3 maxReplicas: 10 metrics: - type: Resource resource: { name: cpu, target: { type: Utilization, averageUtilization: 60 } } Hasil: Layanan elastis (auto-scale), sehat (probe), dipublikasi via LoadBalancer, serta infrastruktur terdefinisi sebagai kode—mudah direplikasi & diaudit saat uji. Silabus (2 Hari Pelatihan + 1 Hari Uji Kompetensi) Hari Sesi Materi Utama Output Praktik 1 Pagi Dasar & Arsitektur Cloud (IaaS/PaaS/SaaS, shared responsibility) Landing zone + diagram arsitektur 1 Siang Jaringan & Keamanan (VPC, IAM, SG, enkripsi) VPC mini + kebijakan IAM least privilege 1 Sore Penyimpanan & DB Terkelola Backup plan + snapshot + rencana restore 2 Pagi IaC (Terraform: modul, state, policy-as-code) Modul Terraform untuk networking & compute 2 Siang Container & Kubernetes + CI/CD Deployment, Service, HPA; pipeline build & deploy 2 Sore Observabilitas, Biaya, DR Dashboard monitoring + budget alert + runbook DR 3 Pagi Uji Teori (format BNSP) Soal studi kasus arsitektur & keamanan 3 Siang Uji Praktik & Wawancara Deploy end-to-end + verifikasi portofolio Rincian Unit Kompetensi & Uraian Tugas Perancangan Arsitektur Cloud – pemetaan kebutuhan, pemilihan layanan, trade-off desain, dokumentasi arsitektur. Containerization & Orkestrasi – pembuatan image, Deployment/Service, autoscaling, rolling update. Keamanan & Jaringan – desain VPC/subnet/route, IAM, enkripsi, secrets management, least privilege. Layanan Data & Storage – pemilihan penyimpanan, backup/restore, replikasi, lifecycle policy. IaC & Otomasi – modul Terraform, pengelolaan state, policy-as-code, integrasi CI/CD. Observabilitas & Keandalan – metrics/logs/traces, SLO/SLI, alerting, chaos drill. Optimasi Biaya & Tata Kelola – tagging, rightsizing, reserved/savings plan, budgets & laporan biaya. DR & Kepatuhan – RTO/RPO, failover, incident response, dan dokumentasi audit. Kesimpulan Kami menyelenggarakan Pelatihan & Sertifikasi BNSP – Skema Ahli Cloud Computing secara offline dengan harga terjangkau Rp7.600.000—sudah termasuk hotel/penginapan & makan, minimal 8 peserta.Info lengkap & pendaftaran: https://mobilefaculty.com/skema-sertifikasi-bidang-komputer/