Skip to content

Releases

v2026.1.0 — Enterprise Infrastructure as Code & Cloud Automation (Terraform 1.9 & Ansible Core 2.16)

v2026.1.0 — Enterprise Infrastructure as Code & Cloud Automation (Terraform 1.9 & Ansible Core 2.16) Latest
Latest

Choose a tag to compare

View all tags
@rafaelmatsuyama rafaelmatsuyama released this 07 Nov 22:54
v2026.1.0
3221839

Enterprise Infrastructure as Code & Cloud Automation — v2026.1.0

We are pleased to announce the official homologated inaugural release v2026.1.0 of the FIAP Executive MBA in DevOps Engineering — Infrastructure as Code (IaC) Reference Architecture & Laboratory Suite.

This release establishes an end-to-end, production-ready curriculum for declarative cloud provisioning, remote state locking, automated compliance and security gating, container orchestration with Amazon EKS, and zero-touch configuration management with Ansible.

🌟 1. Header & Executive Overview

Modern cloud infrastructure demands resilience, idempotency, strict auditability, and shift-left security. This repository provides an enterprise-grade reference architecture tailored for cloud engineers and platform architects.

  • Curricular Edition: 2026 Baseline
  • Academic Program: Executive MBA in DevOps Engineering (FIAP)
  • Delivery Track: Decoupled Public Blueprint (Cohort-Agnostic)
  • Architectural Focus: Declarative Cloud Orchestration (Terraform 1.9+) & Configuration Management (Ansible Core 2.16+) on Amazon Web Services (AWS).

🏗️ 2. Curriculum & Architecture Highlights

Turnkey Cloud Development Environment (GitHub Codespaces)

  • Zero-Friction DevContainer (.devcontainer/devcontainer.json): Pre-configured, fully audited development environment eliminating host dependency drift:
    • Terraform 1.9+ with HashiCorp Language Server, syntax validation, and TFLint.
    • AWS CLI v2 with auto-completion and credential chaining.
    • Docker-outside-of-Docker (DooD) enabling local container provisioning and emulation.
    • Kubernetes CLI Suite: kubectl and helm natively embedded for container orchestration and cluster management.
    • Python 3.11 Runtime & Ansible Core 2.16+ for zero-touch configuration orchestration.

Architectural Blueprint & Flow Diagrams

  • Visual Topology Blueprint (assets/architecture.jpg): High-definition mapping between Developer Tooling, CI/CD Quality Gates, AWS Global Cloud Infrastructure, and Configuration Orchestration.
  • Sequential Flow Diagram (assets/architectural_flow.jpg): End-to-end 5-stage pipeline bridging Developer Workspaces, GitOps Repositories, Shift-Left CI/CD, Cloud Runtime, and Zero-Touch Automation.

Rigorous Governance & Quality Standards

  • 100% Bilingual Parity: All 18 laboratories feature comprehensive, side-by-side documentation in Portuguese (Roteiro Aluno.md) and English (Student Guide.md).
  • Defensive CLI & Native State Ingestion: Standardized consumption of Terraform outputs across all scripts, eliminating fragile parsing and external API dependencies.
  • Dual Licensing IP Architecture: Clear split governance with Apache 2.0 for infrastructure code manifests (*.tf, *.yml, *.sh) and CC BY-NC-SA 4.0 for educational frameworks, architecture blueprints, and student guides.

📊 3. Homologated Laboratory Modules Matrix

Module Laboratory Guide Architectural Focus Technical Stack Enterprise Deliverable & Evidence
Lab 01 Syntax & Core Life Cycle Declarative HCL basics, state creation, init, plan, apply Terraform 1.9+, Local Provider Deterministic file generation and state lifecycle tracking
Lab 02 Local Container Lifecycle Microservices virtualization, state management on local host Terraform, Docker Provider, Nginx Running container mapped to host port 8080
Lab 03 Cloud Provider & Remote State AWS Global Infrastructure, remote S3 state backend with locking Terraform, AWS S3, DynamoDB Remote state persistence and state concurrency locking
Lab 04 Parameterization & Contract Types Input variables, validations, complex types (maps, objects) Terraform HCL Type System Extensible variable architecture with typed outputs
Lab 05 Network Topologies (VPC) Custom VPC, multi-subnet CIDR, Internet Gateway, route tables AWS VPC, IGW, Route Tables Isolated software-defined corporate cloud network
Lab 06 Compute & Perimeter Security EC2 compute, SSH Key Pairs, ingress/egress Security Groups AWS EC2 (Amazon Linux 2), SG Securely accessed virtual compute node
Lab 07 Dynamic Metadata & Discoverability Dynamic AMI resolution using AWS SSM Parameter Store / filters AWS AMI Data Sources, SSM Self-healing, zero-hardcoded AMI resolution pipeline
Lab 08 Resource Scaling Meta-Arguments Declarative array scaling via count and dictionary map for_each HCL count, for_each, Keys Multi-instance deployment with deterministic naming
Lab 09 Dynamic Metaprogramming Repeated nested configurations, DRY blocks, map projections HCL dynamic blocks, content Declarative generation of complex multi-port Security Groups
Lab 10 Modular Infrastructure Composition DRY reusability, root vs child modules, encapsulating contracts Terraform Modules, Root/Child inputs Standardized enterprise VPC module reusable across stages
Lab 11 Local Bootstrap Provisioners Host-side task execution, automated inventory generation Provisioner local-exec, Bash Automated local inventory extraction post-provisioning
Lab 12 Remote Provisioners & Bastions In-guest configuration over SSH, package bootstrapping Provisioner remote-exec, Nginx Verified HTTP/1.1 200 OK Nginx web endpoint
Lab 13 Brownfield Ingestion Legacy infrastructure adoption, state synchronization terraform import, State reconciliation Unmanaged cloud resources brought under declarative IaC control
Lab 14 Secrets & Credentials Governance External secret injection, zero plain-text leaks AWS Secrets Manager, SSM Encrypted secret retrieval and dynamic injection
Lab 15 Managed Kubernetes Orchestration Enterprise Amazon EKS, multi-AZ worker nodes, IAM roles AWS EKS, EC2 Node Groups, kubectl Ready 2-node Kubernetes cluster authenticated via kubectl
Lab 16 Shift-Left DevSecOps Pipeline CI/CD Quality Gate, static vulnerability and security audit GitHub Actions, Trivy, terraform fmt Automated PR check blocking vulnerabilities and format deviations
Lab 17 Configuration Management Multi-node inventory, idempotent playbooks, Jinja2 dynamic templates Ansible Core 2.16+, YAML, Jinja2 Fully customized web services configured across node tiers
Lab 18 Zero-Touch Hybrid Orchestration End-to-end Terraform infrastructure trigger with dynamic Ansible playbook Terraform, Ansible, Dynamic Inventory Zero-human-intervention provisioning and configuration deployment

🛠️ 4. Homologated Technology Stack

  • Infrastructure as Code (IaC): HashiCorp Terraform 1.9.8+
  • Configuration Management: Ansible Core 2.16+ (Python 3.11)
  • Cloud Platform: Amazon Web Services (AWS) — AWS Provider ~> 5.0
  • Container Runtime & Emulation: Docker CE / Docker-outside-of-Docker
  • Container Orchestration Tooling: Kubernetes CLI (kubectl) & Helm 3
  • Static Analysis & Security: Trivy Security Scanner, TFLint
  • Development Workspace: GitHub Codespaces (Ubuntu 22.04 LTS Base)
  • Licensing Governance: Apache 2.0 (Code) / Creative Commons BY-NC-SA 4.0 (Documentation)

🚀 Quickstart

Clone the repository directly from this canonical release tag:

git clone --branch v2026.1.0 https://github.com/rafaelmatsuyama/FIAP-DevOps-InfrastructureAsCode.git
cd FIAP-DevOps-InfrastructureAsCode

Or open directly inside a turnkey cloud container:

Assets 2
Loading