Phase 7 · Cloud, infrastructure and operations

Week 19: Operations

Friday deliverable: Incident write-up

Threads this phase

Security. IAM least privilege, secret managers, container hardening, supply chain

AI. Generate OpenTofu and CI config; review for over-broad IAM and leaked secrets

System trace. Commit → CI → tests → image → registry → deploy → DNS → HTTPS → monitoring

Project 6

Authenticated production API

Accounts, roles, audit log, rate limits and idempotency keys on payments; containerised, CI/CD, then rebuilt on AWS with OpenTofu and operated

Runs on: AWS: EC2, RDS, S3

Phase 7 exit criteria