DevOps Career Transition

Write a defensive Bash script using parameters, quoting, exit codes, and strict error handling.

Organize a Bash automation task with conditionals, loops, and reusable functions.

Extract operational data from text and JSON output using standard command-line filters and jq.

Schedule a Bash task and capture its output and errors for troubleshooting.

Write a small Python script using variables, collections, conditionals, and loops.

Define Python functions and handle expected failures with exceptions.

Read configuration from environment variables and process JSON data in Python.

Write a Python health-check utility that calls an HTTP API, validates its response, and returns an automation-friendly exit code.

Given an AWS workload, select an appropriate Region and multi-Availability-Zone placement and identify the relevant shared-responsibility boundaries.

Secure an AWS account with root-user protections, multi-factor authentication, and administrative role separation.

Interpret an IAM policy and determine which actions and resources it permits or denies.

Create a least-privilege IAM role for a workload instead of using long-lived user credentials.

Configure named AWS CLI profiles with short-lived credentials and verify the active identity before making changes.

Query and filter AWS resources from the command line using AWS CLI output controls.

Use CloudTrail event history to identify who changed an AWS resource.

Configure budgets, cost alerts, and resource tags to control spending during labs.

Design IPv4 CIDR ranges and public and private subnets for a small multi-Availability-Zone VPC.

Configure public-subnet routing and select a cost-aware outbound-access pattern for private subnets based on workload needs.

Choose and configure security-group and network-ACL rules for a stated traffic flow.

Launch and bootstrap an EC2 instance with user data and administer it through Systems Manager Session Manager.

Configure an S3 bucket with appropriate access controls, versioning, and lifecycle behavior.

Route HTTP traffic through an Application Load Balancer and interpret target health checks.

Configure an Auto Scaling group to replace unhealthy instances and respond to demand.

Troubleshoot a failed web request by checking DNS resolution, load-balancer health, security controls, routes, and EC2 service state.

Explain how images, containers, registries, layers, namespaces, and control groups relate during container execution.

Run, inspect, stop, remove, and troubleshoot a container with Docker commands.

Write a Dockerfile that packages a simple application with repeatable dependencies.

Reduce image size and attack surface using multi-stage builds, pinned dependencies, and a non-root user.

Persist and share container data using named volumes and bind mounts.

Connect containers through user-defined networks and verify name-based service discovery.

Define and run a small multi-container application with Docker Compose.

Authenticate Docker to Amazon ECR and tag, push, and pull a versioned container image.

Design pipeline stages and quality gates that take a version-controlled change to a deployable release.

Create a GitHub Actions workflow that runs automated checks on pull requests.

Use dependency caching and build artifacts without allowing stale output to contaminate a pipeline.

Authenticate a GitHub Actions workflow to AWS using short-lived OpenID Connect credentials.

Build a versioned Docker image in CI and publish it to Amazon ECR.

Deploy a container release to an EC2 host through Systems Manager and verify its health.

Compare rolling, blue-green, and canary releases and choose a rollback strategy for a stated risk.

Configure protected environments, approval gates, and safe secret handling for release promotion.

Declare AWS resources in Terraform and explain how references form a dependency graph.

Parameterize Terraform configuration using variables, local values, and outputs.

Use init, validate, plan, apply, and destroy safely within the Terraform workflow.

Inspect Terraform state and reconcile a simple case of configuration drift.

Configure a remote state backend with locking and protection against accidental loss.

Build and consume a reusable Terraform module with a clear input and output interface.

Compose Terraform modules to provision a VPC, load balancer, and EC2-based service.

Run Terraform formatting and validation and publish a reviewable plan in a pull-request pipeline without automatically applying it.

Build an Ansible inventory and verify managed-host connectivity with an ad hoc command.

Write an idempotent playbook using purpose-built Ansible modules.

Adapt a playbook with variables, gathered facts, conditionals, and loops.

Render a configuration file with a Jinja template and restart a service only when it changes.

Package related tasks, defaults, templates, and handlers into a reusable Ansible role.

Protect sensitive automation values with Ansible Vault.

Target changing EC2 instances using an AWS dynamic inventory.

Use Terraform outputs to drive Ansible inventory and configure an EC2-hosted service without manual server changes.

Explain how the Kubernetes control plane and node components reconcile declared workload state.

Apply a Pod manifest to a local Kubernetes cluster and use events and logs to diagnose a startup failure.

Manage replicated application Pods with a Deployment and verify a rollout.

Expose workloads and select an appropriate Kubernetes Service type for a stated access requirement.

Inject runtime configuration with ConfigMaps and Secrets while keeping secret values out of Git.

Configure startup, readiness, and liveness probes for a containerized service.

Set CPU and memory requests and limits and interpret a resource-related scheduling failure.

Provision persistent application data with a PersistentVolumeClaim.

Create a cost-controlled Amazon EKS lab cluster with a maintained Terraform module and verify the configuration required for complete teardown.

Grant administrative and developer access using EKS access entries, IAM integration, and Kubernetes RBAC.

Deploy an application from Amazon ECR to EKS and verify its health and AWS runtime identity using EKS Pod Identity or IRSA.

Install and configure the AWS Load Balancer Controller with Helm and verify its health and IAM permissions.

Expose an EKS workload through an ingress resource and an AWS load balancer.

Configure horizontal workload scaling from observed resource demand.

Perform a controlled Kubernetes rollout and rollback while preserving service availability.

Diagnose an EKS workload failure using kubectl state, events, logs, DNS checks, and AWS infrastructure signals.

Define service-level indicators and objectives for a web service using user-visible reliability signals.

Use CloudWatch metrics and Logs Insights to build one workload dashboard and one actionable alarm.

Collect Kubernetes workload metrics with Prometheus and verify that expected targets are being scraped.

Build a Grafana dashboard that connects resource behavior to user-visible service health.

Centralize EKS application logs and retrieve the records associated with a failed request.

Triage a simulated incident, record a timeline, and write a blameless post-incident review with follow-up actions.

Configure a Trivy pull-request check that detects vulnerable source dependencies and container images.

Configure a Checkov pull-request check that detects security misconfigurations and policy violations in Terraform.

Convert workload requirements into an AWS DevOps architecture diagram, delivery plan, and measurable acceptance criteria.

Structure a portfolio repository so application code, infrastructure, configuration, pipeline definitions, and documentation are easy to evaluate.

Provision the capstone network and EKS environment from reviewed Terraform configuration and verify its outputs.

Publish a traceable container release through CI using commit identifiers, image tags, and retained build evidence.

Deploy the release to EKS with Helm and demonstrate a safe update and rollback.

Instrument the project, trigger a controlled failure, and use collected signals to identify the cause.

Write a concise README and operations runbook covering setup, rollback, troubleshooting, cost controls, and key security decisions.

Translate Oracle DBA experience into DevOps-focused résumé evidence and explain the portfolio project in a structured interview response.