Advance your platform engineering expertise by architecting secure, scalable, and reusable cloud-native infrastructure. This course focuses on container security and Infrastructure as Code (IaC) governance across modern enterprise environments. You will begin by implementing container supply-chain strategies, including Azure Container Registry (ACR) image signing with Notary v2 and Software Bill of Materials (SBOM) generation to help ensure that only verified code reaches production environments. You will also strengthen Kubernetes security using Pod Security Admission (PSA) and admission controllers to support compliance with CIS benchmark standards.

Beyond containers, the course explores the development of reusable Bicep and Terraform module libraries with built-in cost guardrails and policy-as-code integrations. Through hands-on activities, you will learn to automate infrastructure validation, detect configuration drift, and improve consistency across cloud environments. By the end of the course, you will have built a versioned infrastructure module library that supports governance, scalability, and operational reliability in enterprise-scale cloud platforms.