A tailored course, built for your situation
More accurate cloud infrastructure specs, first time
Build AWS and GCP configurations that require zero rework
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
The situation this course is for
Who this is for
Cloud infrastructure contributor working with AWS, GCP, and IaC tools who needs to deliver precise, audit-aligned configurations consistently
Who this is not for
Engineers focused only on local dev environments or non-compliant cloud sandboxes
What you walk away with
- Artefacts that pass peer and compliance review without iteration
- Clear decision logs for every Terraform module choice
- Standardised naming and tagging that align with enterprise policies
- Validation checklists tailored to AWS and GCP control mappings
- Configurations that reflect both technical accuracy and policy intent
The 12 modules (with all 144 chapters)
Module 1. Aligning AWS resource specs with enterprise naming standards
Learn how to structure S3 buckets, IAM roles, and VPCs with naming conventions that support auditability and ownership clarity across teams.
12 chapters in this module
- S3 bucket naming logic
- IAM role prefix rules
- VPC tagging hierarchy
- Environment label standards
- Owner ID embedding
- Project-code mapping
- Compliance category tags
- Region-aware naming
- Version suffix format
- Validation checklist for AWS names
- Cross-account consistency
- Template generation
Module 2. GCP resource labelling that matches policy intent
Design GCP resource labels that reflect security, cost, and operational requirements , making them instantly interpretable in audits and reviews.
12 chapters in this module
- Purpose-based labels
- Cost center tagging
- Data classification markers
- Environment segregation
- Team ownership labels
- Lifecycle stage tags
- Regulatory domain flags
- Automated label validation
- Service-tier designation
- Audit trail link insertion
- Cross-project label sync
- Label schema documentation
Module 3. Terraform module documentation that stands up to scrutiny
Create module-level documentation that explains intent, constraints, and dependencies clearly , so reviewers don’t need to reverse-engineer logic.
12 chapters in this module
- Input variable descriptions
- Output purpose statements
- Dependency rationale
- Security boundary notes
- Change impact warnings
- Compliance mapping references
- Assumption listing
- Failure mode notes
- DR plan alignment
- Version compatibility matrix
- Known limitation disclosures
- Review sign-off template
Module 4. Validation workflows for infrastructure-as-code
Implement pre-commit checks, linters, and policy-as-code rules that catch misconfigurations before they enter version control.
12 chapters in this module
- Pre-commit hook setup
- TFSec rule tuning
- Checkov integration
- Custom Open Policy Agent rules
- Secrets scanning automation
- Drift detection triggers
- Compliance gate logic
- CI pipeline validation steps
- Policy bundle versioning
- Error message clarity
- Remediation path documentation
- Validation log retention
Module 5. Secure baseline configurations for AWS services
Define and reuse hardened configurations for EC2, RDS, Lambda, and API Gateway that meet internal control requirements by default.
12 chapters in this module
- EC2 AMI selection rules
- RDS encryption defaults
- Lambda execution role limits
- API Gateway throttling setup
- CloudTrail integration
- Config rule enforcement
- Backup retention policies
- VPC flow log enablement
- Security group templating
- Cross-account access guardrails
- Patch baseline adherence
- Automated config publishing
Module 6. GCP service hardening patterns
Apply consistent security controls across Compute Engine, Cloud SQL, and Cloud Functions through standardised configuration templates.
12 chapters in this module
- Compute Engine shielded VM settings
- Cloud SQL IP whitelist rules
- Private Google Access setup
- IAM primitive role avoidance
- Service account key rotation
- Cloud Function timeout limits
- VPC Service Controls
- Log sink export configuration
- Org policy constraints
- Default deny firewall rules
- Audit logging enablement
- Template repository structure
Module 7. Infrastructure decision logging
Capture the rationale behind key infrastructure choices so future reviewers understand context without needing tribal knowledge.
12 chapters in this module
- When to log decisions
- Architecture trade-off format
- Security vs. cost notes
- Vendor selection reasoning
- Scalability assumptions
- Compliance exemption notes
- Third-party integration rationale
- Disaster recovery impact
- Peer review feedback log
- Change approval trail
- Version-linked documentation
- Archival process
Module 8. Multi-cloud consistency patterns
Ensure AWS and GCP deployments follow parallel standards for naming, tagging, monitoring, and access so they’re equally auditable.
12 chapters in this module
- Cross-cloud naming alignment
- Unified tag schema
- Common logging format
- Monitoring threshold parity
- IAM and GCP IAM mapping
- Role purpose consistency
- Secrets management similarity
- Network segmentation logic
- Compliance control mapping
- Patch cycle coordination
- DR playbook convergence
- Cross-cloud cost tracking
Module 9. Compliance-ready artefact packaging
Bundle configurations, decision logs, and validation reports into review-ready packages that reduce back-and-forth during audits.
12 chapters in this module
- Artefact version bundling
- Control mapping spreadsheet
- Validation output inclusion
- Decision log attachment
- Review timestamp tracking
- Change history summary
- Owner declaration section
- Compliance exemption list
- External reference linking
- Packaging automation script
- Storage location standard
- Access control for bundles
Module 10. Peer review preparation for infrastructure specs
Anticipate reviewer questions and objections by proactively addressing common pain points in your documentation and structure.
12 chapters in this module
- Common feedback categories
- Naming clarity checks
- Tag completeness verification
- Security boundary explanation
- Cost impact disclosure
- DR implications note
- Compliance coverage statement
- Change rollback plan
- Testing evidence inclusion
- Cross-team impact notes
- Review cycle timing estimate
- Reviewer assignment logic
Module 11. Automated quality gates in CI/CD pipelines
Embed infrastructure quality checks directly into deployment pipelines to prevent low-quality specs from progressing.
12 chapters in this module
- Linting at pull request
- Policy check enforcement
- Unit test requirements
- Integration test triggers
- Security scan inclusion
- Compliance gate logic
- Approval escalation rules
- Failure alert routing
- Remediation step guides
- Gate bypass audit trail
- Pipeline speed impact
- Gate documentation standard
Module 12. Building a personal library of reusable templates
Curate and maintain a private repository of vetted, high-quality templates that accelerate future work and reinforce consistency.
12 chapters in this module
- Template categorisation
- Version control setup
- Usage documentation
- Update process definition
- Peer validation cycle
- Security review schedule
- Compliance recertification
- Cross-project sharing rules
- Deprecation notice process
- Searchability optimisation
- Feedback loop integration
- Backup and recovery
How this maps to your situation
- When drafting new AWS configurations
- Before GCP project setup
- During Terraform module design
- Prior to peer review submission
Before vs. after
Before
Infrastructure specs often require multiple review rounds to align with compliance and operational standards.
After
Every configuration is audit-ready, accurate, and clearly justified , accepted on first submission.
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3 hours per module, with self-paced progression.
How this compares to the alternatives
Generic cloud courses focus on setup and syntax; this course focuses on output quality, review readiness, and defensible decision-making in regulated environments.
Frequently asked
Is this course specific to AWS and GCP?
Yes, every module includes concrete patterns and examples for both AWS and GCP environments.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Will I get templates I can use immediately?
Yes, every module includes downloadable, customisable templates and real-world examples.
$199 one-time. Approximately 3 hours per module, with self-paced progression..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours