Roadmap des talents
Infra
Profil Cloud Engineer — provisioning cloud.
Persona Cloud Engineer — provisioning cloud reproductible : infrastructure as code, sécurité réseau, FinOps.
Dépendances
flowchart TB
classDef composite fill:#e7e3ff,stroke:#6d5ef6,color:#3a2f9e;
classDef atomic fill:#fff,stroke:#6d5ef6,color:#3a2f9e;
tf["terraform"]:::composite
dbac["database-as-code"]:::atomic
netsec["network-security"]:::atomic
lz["landing-zones"]:::composite
cost["cost-optimization"]:::atomic
rot["secrets-rotation"]:::atomic
dr["disaster-recovery"]:::atomic
tf --> dbac
tf --> netsec
tf --> lz
netsec -.-> lz
tf -.-> cost
tf --> rot
dbac -.-> drTalents
P0 → P2 = à développer. Dans « Dépend de » :
→requires ·≈recommends ·⊃inclut (composite).
Socle IaC
| Talent | Type | P | Dépend de | Description |
|---|---|---|---|---|
infra.terraform | composite | P1 | — | Modules Terraform/OpenTofu, state distant, testing IaC. |
infra.database-as-code | atomic | P1 | → terraform | RDS/Aurora en Terraform, migrations, backups. |
infra.container-registry | atomic | P2 | → terraform | ECR/GCR/ACR, lifecycle, scan, réplication. |
infra.iac-testing | atomic | P2 | → terraform | Tests d'IaC : Terratest, plan review, policy checks. |
Réseau & sécurité
| Talent | Type | P | Dépend de | Description |
|---|---|---|---|---|
infra.network-security | atomic | P2 | → terraform | VPC, security groups, WAF, zero-trust. |
infra.iam-least-privilege | atomic | P1 | → terraform | IAM moindre privilège : rôles, boundaries, accès temporaires. |
infra.landing-zones | composite | P2 | → terraform · ≈ network-security | Multi-compte, guardrails, security baseline. |
infra.secrets-rotation | atomic | P2 | → terraform · ≈ devops.secret-management | Rotation automatisée (Vault, Secrets Manager). |
infra.compliance-as-code | atomic | P2 | → terraform | OPA/Rego, CIS benchmarks, SOC2 / ISO27001. |
infra.cdn-edge | atomic | P2 | ≈ network-security | CloudFront / Fastly, edge functions, WAF. |
infra.dns-certificates | atomic | P2 | ≈ network-security | DNS, ACME / cert-manager, rotation TLS. |
infra.service-mesh | atomic | P2 | → terraform | Provisioning Istio/Linkerd, cert-manager TLS. |
Résilience, coûts & observabilité
| Talent | Type | P | Dépend de | Description |
|---|---|---|---|---|
infra.cost-optimization | atomic | P2 | ≈ terraform | FinOps : rightsizing, tagging, savings plans. |
infra.disaster-recovery | atomic | P2 | ≈ database-as-code | RPO/RTO, multi-région, pilot light / warm standby. |
infra.multi-cloud | atomic | P2 | → terraform | Patterns multi-cloud AWS/GCP/Azure. |
infra.observability | atomic | P2 | → terraform | Dashboards & alerting en IaC, SLO-driven. |