zero trust security cloud – Mobile Faculty

Program resmi – Skema Ahli Cloud Computing (BNSP) untuk Anda yang ingin memvalidasi kemampuan profesional dalam merancang, membangun, mengamankan, mengoperasikan, dan mengoptimasi arsitektur cloud (IaaS, PaaS, SaaS). Kurikulum selaras praktik industri dan format asesmen BNSP, berfokus pada hands-on lab dan portofolio: diagram arsitektur, modul Infrastructure as Code (IaC), manifest Kubernetes, runbook SRE, dan dashboard observabilitas.Pelaksanaan offline (opsi online by request). Biaya Rp7.600.000 termasuk hotel/penginapan & makan; minimal 8 peserta. Pendahuluan Keberhasilan adopsi cloud ditentukan oleh desain arsitektur yang benar, keamanan yang ketat, observabilitas menyeluruh, dan optimasi biaya berkelanjutan. Program ini memandu alur end-to-end: desain → implementasi → otomasi (IaC) → orkestrasi kontainer → observabilitas → tata kelola & biaya → DR & kepatuhan, sekaligus menyiapkan bukti kerja yang siap ditunjukkan pada saat asesmen BNSP. Unit Kompetensi (Cakupan Materi) Arsitektur Cloud & Model Layanan (IaaS/PaaS/SaaS, shared responsibility, well-architected). Virtualisasi & Container (Docker image, registry, image scanning). Orkestrasi Kubernetes (Deployment, Service/Ingress, HPA, rolling update). Jaringan & Keamanan Cloud (VPC/subnet/route, IAM least privilege, enkripsi, secrets). Penyimpanan & Basis Data Terkelola (objek/blok/file, managed DB, backup/snapshot). Infrastructure as Code (IaC) (Terraform/CloudFormation: modul, state, policy-as-code). CI/CD & Otomasi Rilis (pipeline build–test–deploy, blue/green, canary). Monitoring, Logging & Observabilitas (metrics, traces, alerting, SLO/SLI). Optimasi Biaya & Tata Kelola (tagging, rightsizing, budgets, governance). High Availability, DR & Kepatuhan (multi-AZ/region, RTO/RPO, audit trail). Contoh Studi Kasus (dengan coding) Konteks: Perusahaan ritel menyiapkan microservice katalog produk pada Kubernetes terkelola. Syarat: skala elastis, aman, dan termonitor; deploy harus otomatis via IaC. 1) Cuplikan IaC (Terraform — ringkas) Simpan kredensial pada environment variable; hindari hard-code. terraform { required_providers { aws = { source = "hashicorp/aws" } } } provider "aws" { region = var.aws_region } resource "aws_security_group" "web" { name = "svc-web-sg" vpc_id = var.vpc_id ingress { from_port = 80 to_port = 80 protocol = "tcp" cidr_blocks = ["0.0.0.0/0"] } egress { from_port = 0 to_port = 0 protocol = "-1" cidr_blocks = ["0.0.0.0/0"] } } # EKS/NodeGroup/ALB/IAM dikelola via modul terpisah agar reusable & auditable. 2) Manifest Kubernetes (Deployment + Service) apiVersion: apps/v1 kind: Deployment metadata: { name: catalog-svc } spec: replicas: 3 selector: { matchLabels: { app: catalog } } template: metadata: { labels: { app: catalog } } spec: containers: - name: app image: ghcr.io/org/catalog:1.0.0 ports: [{ containerPort: 8080 }] resources: requests: { cpu: "100m", memory: "128Mi" } limits: { cpu: "500m", memory: "512Mi" } readinessProbe: { httpGet: { path: /health, port: 8080 }, initialDelaySeconds: 5 } livenessProbe: { httpGet: { path: /health, port: 8080 }, initialDelaySeconds: 15 } --- apiVersion: v1 kind: Service metadata: { name: catalog } spec: selector: { app: catalog } ports: [{ port: 80, targetPort: 8080 }] type: LoadBalancer 3) Horizontal Pod Autoscaler (HPA) apiVersion: autoscaling/v2 kind: HorizontalPodAutoscaler metadata: { name: catalog-hpa } spec: scaleTargetRef: { apiVersion: apps/v1, kind: Deployment, name: catalog-svc } minReplicas: 3 maxReplicas: 10 metrics: - type: Resource resource: { name: cpu, target: { type: Utilization, averageUtilization: 60 } } Output yang diharapkan: Layanan elastis, sehat, terekspos dengan aman via LoadBalancer, dan bisa di-deploy otomatis dari pipeline — memudahkan replikasi, code review, dan audit saat uji kompetensi. Silabus (2 Hari Pelatihan + 1 Hari Uji Kompetensi) Hari Sesi Materi Utama Output Praktik 1 Pagi Dasar & Arsitektur Cloud (IaaS/PaaS/SaaS, shared responsibility) Landing zone + diagram arsitektur 1 Siang Jaringan & Keamanan (VPC, IAM, enkripsi, secrets) VPC mini + kebijakan IAM least privilege 1 Sore Storage & Managed DB (backup/snapshot/lifecycle) Rencana backup/restore terdokumentasi 2 Pagi IaC (Terraform: modul, state, policy-as-code) Modul Terraform untuk networking/compute 2 Siang Kubernetes & CI/CD Deployment, Service, HPA + pipeline build–deploy 2 Sore Observabilitas, Biaya, & DR Dashboard monitoring + budget alert + runbook DR 3 Pagi Uji Teori (format BNSP) Studi kasus arsitektur & keamanan 3 Siang Uji Praktik & Wawancara Deploy end-to-end + verifikasi portofolio Rincian Unit Kompetensi & Uraian Tugas Perancangan Arsitektur Cloud – mengkaji kebutuhan, menyusun trade-off, dokumentasi desain. Containerization & Orkestrasi – membangun image, Deployment/Service/Ingress, autoscaling, rolling update. Keamanan & Jaringan – VPC/subnet/route, IAM least privilege, enkripsi, secret management. Layanan Data & Storage – pemilihan tipe storage, backup/restore, replikasi, lifecycle policy. IaC & Otomasi – modul Terraform, pengelolaan state, policy-as-code, integrasi CI/CD. Observabilitas & Keandalan – metrics/logs/traces, SLO/SLI, alerting, chaos drill. Optimasi Biaya & Tata Kelola – tagging, rightsizing, reserved/savings plan, budgets & laporan biaya. DR & Kepatuhan – RTO/RPO, failover, incident response, audit evidence. Kesimpulan Kami menyelenggarakan Pelatihan & Sertifikasi BNSP – Skema Ahli Cloud Computing secara offline dengan harga Rp7.600.000—sudah termasuk hotel/penginapan & makan, minimal 8 peserta.Detail & pendaftaran: https://mobilefaculty.com/skema-sertifikasi-bidang-komputer/