Course Objective & Scope
Manual changes made in cloud consoles or over SSH lead to environment drift and infrastructure that cannot be reliably rebuilt during an outage. This course teaches how to version, review and provision infrastructure just like application code.
HCL syntax with Terraform/OpenTofu, providers and remote state locking, module design, environment separation, `terraform test` and Checkov/OPA checks, alongside idempotent server configuration using Ansible playbooks and roles, are practised hands-on. Participants build a modular, CI/CD-driven IaC template tailored to their target environment.
Who Should Attend?
- DevOps, cloud and system engineers provisioning cloud and data centre resources
- Platform engineering teams building reusable infrastructure modules
- Software architects automating test and application environments
- Prerequisite: basic cloud/server concepts and Git familiarity
Key Takeaways
- Provision networking, compute, Kubernetes and database resources declaratively with Terraform/OpenTofu
- Configure remote state storage, state locking and sensitive variable handling securely
- Author versioned, reusable IaC modules for consumption across teams
- Complete OS and service configuration idempotently with Ansible playbooks and roles
- Build a pull-request CI/CD workflow that runs plans, security scans and cost checks
Curriculum
IaC Approaches and Terraform / OpenTofu Foundations
- Provisioning versus configuration management (using Terraform/OpenTofu with Ansible)
- HCL, providers, resources, data sources, variables, outputs and locals
State Management and Resource Lifecycle
- Remote backends (S3/Azure Blob/GCS), state locking and workspace/directory layouts
- for_each, count, dynamic blocks, lifecycle rules and import/moved blocks
Module Design, Testing and Policy-as-Code
- Designing and versioning reusable modules
- tflint, terraform validate/test, Checkov and OPA/Sentinel policy checks
Server Configuration Automation with Ansible
- Inventories, playbooks, tasks, handlers, Jinja2 templates and Ansible Vault
- Role structure and idempotent OS hardening
Automated IaC Delivery with Git and CI/CD
- PR-driven plan/apply workflows (Atlantis, GitHub Actions, GitLab CI)
- Drift detection and enterprise IaC checklist
Other Courses in This Category
-
CI/CD Pipelines: Continuous Integration and Continuous Delivery
Modern CI/CD pipeline design with GitHub Actions, GitLab CI and Jenkins: branching strategies, fast builds and caching, automated testing and quality gates, container/artefact versioning and zero-downtime deployment.
- Live Course
- 5 modules
-
Platform Engineering: Designing Internal Developer Platforms (IDP)
Platform Engineering and Internal Developer Platform (IDP) design with a product mindset: golden path templates, Backstage developer portals, self-service infrastructure with Crossplane/Terraform, reducing cognitive load and DORA/SPACE metrics.
- Live Course
- 5 modules
-
Site Reliability Engineering (SRE) Fundamentals
Site Reliability Engineering (SRE) fundamentals: defining SLIs, SLOs and error budgets, reducing toil through automation, symptom-based monitoring and multi-window burn-rate alerts, on-call incident management and blameless postmortems.
- Live Course
- 5 modules
-
Microsoft PowerShell for System Administration and Automation
PowerShell 7 and Windows PowerShell for sysadmins and DevOps teams: the object pipeline, WMI/CIM, PowerShell Remoting, Active Directory and Microsoft Graph/Azure automation, module authoring and secure execution.
- Live Course
- 5 modules
-
AIOps Foundation: AI-Driven IT Operations and Incident Intelligence
AI for IT Operations (AIOps) fundamentals and AIOps Foundation preparation: telemetry unification, anomaly detection, event correlation and alert noise reduction, automated root-cause analysis, LLM/agent-assisted on-call and self-healing.
- Live Course
- 5 modules
-
DevSecOps: Automated Security in CI/CD and Cloud-Native Delivery
Shift-left security integrated into CI/CD pipelines: pre-commit secret scanning, SAST, SCA and SBOMs, container and IaC security checks, DAST, automated security quality gates and vulnerability lifecycle management.
- Live Course
- 5 modules
Get in touch