Infrastructure as Code
Every team that clicks through a cloud console eventually reaches the same point: the staging environment no longer matches production, nobody can say exactly how either was built, and rebuilding one would take a week of archaeology. Infrastructure as code fixes that by making the repository the description of what exists. Two days on doing it properly, including the parts that go wrong: state files, drift, and the destroy that takes down more than intended.
Programme Agenda
Why Declarative, and What It Costs
Describing desired state rather than steps. What you gain in reproducibility and review, and the genuine costs: a new language, a state file to protect, and a slower path for urgent changes.
Providers, Resources and Dependencies
The basic building blocks. Implicit and explicit dependencies, the resource graph, and reading a plan output properly before approving it.
State: The Part That Bites
What the state file holds and why it is sensitive. Remote backends, locking to prevent concurrent applies, and recovering from a corrupted or diverged state. Importing existing resources.
Variables, Outputs and Secrets
Parameterising a configuration without making it unreadable. Where secrets belong, which is not the repository and not the state file if you can avoid it.
Modules and Reuse
Writing a module with a sensible interface, versioning it, and the balance between reuse and the over-abstracted module nobody can debug. Registry modules and when to trust them.
Environment Separation
Workspaces, directory-per-environment and separate state. Keeping development, staging and production genuinely isolated while sharing module code.
Drift, Review and Pipelines
Detecting manual changes made in the console, deciding whether to revert or absorb them, and running plan and apply through a pipeline with a human approval on the plan.
Dangerous Changes
Reading a plan for resource replacement, protecting stateful resources from accidental destruction, and rehearsing the change that would have taken production down.
Learning Outcomes:
Explain the trade-offs of declarative infrastructure honestly
Read a plan output and predict what an apply will actually do
Manage remote state with locking, and recover from state problems
Import existing manually created resources under management
Handle variables and secrets without putting credentials in the repository
Write a reusable module with a clean interface and version it
Separate environments while sharing module code
Detect drift and run plan and apply through a reviewed pipeline
Duration: 2 Days (16 Hours)
Training Hours: 9:00 AM to 5:00 PM
Level: All levels
Training Mode: Physical, Online, or Hybrid
HRD Corp SBL-KHAS Claimable
Certificate of Completion included
Frequently Asked Questions
More in Cloud, DevOps and Platform Engineering
- DevSecOps and Cloud Security Hardening · All levels, 2 days
- Cloud Engineering Foundations (AWS and Azure) · Beginner, 2 days
- Containers and Kubernetes Basics · Beginner, 2 days
- CI/CD and DevOps Culture · All levels, 1 day