-
Notifications
You must be signed in to change notification settings - Fork 32
Expand file tree
/
Copy pathBe_A_Man.txt
More file actions
27 lines (24 loc) · 1.22 KB
/
Copy pathBe_A_Man.txt
File metadata and controls
27 lines (24 loc) · 1.22 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
4)Be a Man Challenge Additional (For Stronger Students)
“Base lab = Medium. Apply 1–3 multipliers to reach Hard/Expert.”
Global Multipliers
Multi-account:
Separate “dev” and “prod” AWS accounts; deploy via Terraform workspaces or different state backends.
Multi-region:
Aurora Global DB, cross-region SNS, cross-region EventBridge routing.
Security:
IAM least privilege policies (no *:*).
WAF on API Gateway with basic rules.
Parameter Store / Secrets Manager, no DB creds in plaintext.
Observability:
Structured logging (JSON).
CloudWatch dashboards for latency, throttles, errors, DLQ counts.
CI/CD:
GitHub Actions or CodePipeline running terraform fmt, terraform validate, pytest and deploy.
Per-Lab Examples
Lab 1: add Rekognition + object labeling + per-user quota checks.
Lab 2: add idempotency keys for orders + charge simulation + refunds queue.
Lab 3: add inventory versioning + audit trail table.
Lab 4: add chaotic event injection and DLQ replay script.
Lab 5: add semantic caching layer in DynamoDB; add SQL query cost controls.
Lab 9: capture TPS and Lambda concurrency in Aurora + QuickSight graphs.
Lab 10: run actual failover drill and log RTO/RPO metrics.