Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

Cloud Native & IaC Management

Microsoft via Coursera

Go to class Write review

Overview

Google, IBM & Meta Certificates – 40% Off

One plan covers every Professional Certificate on Coursera.

Unlock All Certificates

Advance your platform engineering expertise by architecting secure, scalable, and reusable cloud-native infrastructure. This course focuses on container security and Infrastructure as Code (IaC) governance across modern enterprise environments. You will begin by implementing container supply-chain strategies, including Azure Container Registry (ACR) image signing with Notary v2 and Software Bill of Materials (SBOM) generation to help ensure that only verified code reaches production environments. You will also strengthen Kubernetes security using Pod Security Admission (PSA) and admission controllers to support compliance with CIS benchmark standards. Beyond containers, the course explores the development of reusable Bicep and Terraform module libraries with built-in cost guardrails and policy-as-code integrations. Through hands-on activities, you will learn to automate infrastructure validation, detect configuration drift, and improve consistency across cloud environments. By the end of the course, you will have built a versioned infrastructure module library that supports governance, scalability, and operational reliability in enterprise-scale cloud platforms.

Syllabus

Container Supply Chains: Image Signing and SBOM Security

Learn how to cryptographically sign container images and generate Software Bill of Materials (SBOMs) to protect your infrastructure from compromised artifacts.

Container Supply Chains: Admission Controller Compliance

Enforce security boundaries directly at the Kubernetes cluster level by analyzing admission logs and configuring Pod Security Admission rules.

IaC Management: Governance and Module Library Management

Shift cloud governance left by baking compliance, Azure Policy hooks, and enterprise tagging directly into reusable IaC modules.

IaC Management: Drift Detection and Remediation

Protect the integrity of your IaC states by identifying out-of-band "ClickOps" changes and implementing aggressive drift remediation workflows.

GenAI Module: AI-Assisted Infrastructure Authoring

Discover how generative AI can accelerate the authoring of Infrastructure as Code modules, particularly when translating legacy templates into modern, policy-compliant Bicep or Terraform structures.

Project Module: Secure IaC Module Library

You will consolidate your skills into an architectural strategy for a secure infrastructure module library, defining policies for container image signing, Pod Security Standards, and aggressive configuration drift remediation.