The Life Starter
Sign up
All courses/Digital

Course 284 · Digital course 47

Plan a Cloud Service with Cost and Access Controls

Build a fictional cloud-service architecture packet with workload and data flow, responsibility boundary, least-privilege role matrix, unit-based cost and egress budget, recovery table and supported service decision. Work from supplied original examples and check changed cases.

Before you start

Review the existing internet/network and project-planning courses.

Understand Computer Networks See everything you’ll need

Free download · Original practice data · No external account required. Download the starter pack

What you’ll leave with

A fictional cloud-service architecture packet with workload and data flow, responsibility boundary, least-privilege role matrix, unit-based cost and egress budget, recovery table and supported service decision.

Start course Start without an account. Sign in to save lesson progress across devices.

Your project

Start with the practice files. Build your project one lesson at a time.

Practice files are free without an account. Sign in to save your project record in My Proof: a description, checklist, and optional work link. Keep the original files in your own app or notebook; saving a project record does not upload them.

  1. Get your materialsDownload practice filesSupplied practice cases, a blank working record, complete lesson instructions, and annotated worked examples.
  2. Make your projectView the project checklist Work in your own notebook, document, or software. Use the supplied practice examples when you prefer.
  3. Keep a private recordSave a project record Sign in to save a description and checklist, then return to update them.
Course handbook

Know the route before you begin.

Here’s what you’ll need and what you’ll make. You can return to this guide during any lesson.

Who this is for

Learners ages 14+ and adults ready for the named prerequisite; no employment or private records required.

Prepare before lesson one
  • Review the existing internet/network and project-planning courses.
  • Complete with paper/text and the supplied fictional rates; optional Python 3 runs the independent arithmetic assertions.
  • No cloud account, signup, card, deployment, real provider pricing, private data, or paid service is required.
Your final project

Finish with proof you can use.

A fictional cloud-service architecture packet with workload and data flow, responsibility boundary, least-privilege role matrix, unit-based cost and egress budget, recovery table and supported service decision.

Save a project record in My Proof
See project checklist and review criteria

Keep your working files in your own notebook or software. Save a private description, checklist, and work link in My Proof.

What to include

  • Create a unit-labeled workload, minimal-data flow, and explicit planning-assumption register.
  • Produce a service-specific provider/customer matrix and a list of real-contract questions.
  • Create task-based allowed/denied role cases and clearly mark the access matrix as design evidence.
  • Deliver independently checked baseline and stress costs, reserve totals, and a budget-review condition.
  • Create a recovery timeline and validation checklist with distinct RPO/RTO targets and unexecuted limits.
  • Deliver a supported architecture decision with calculation evidence and unresolved real-service questions.

Review and revise

Use these criteria to check your work and choose what to improve.

  • The implementation or declared simulation follows the supplied contract and retains inspectable original inputs.
  • Normal, boundary and rejected cases are recorded with expected versus observed results.
  • The changed case has a correct explanation and does not rely on hidden state.
  • The project includes source, outputs, instructions and honest tool, privacy and verification limits.
Three ideas to help you along the way
Three useful ideas

The rules behind the steps.

01

State the contract

Name inputs, permitted states and observable outputs before editing the implementation.

02

Preserve the evidence

Keep the actual source, changed input and expected/observed record so someone can repeat the work.

03

Test the boundary

Check a rejection or changed case and distinguish local practice from real service or native-tool behavior.

What do these words mean?
Key words

Key terms worth knowing.

shared responsibility
A service-specific division of provider and customer duties.
least privilege
Permissions limited to required tasks.
egress
Data leaving the modeled service.
RPO
The acceptable data-loss time window.
RTO
The acceptable restoration-time target.
reserve
An explicit contingency added to a modeled budget.
Your route

6 lessons.
One useful project.

Work in order the first time. Each lesson makes something the next lesson can use.

  1. 1
    Up next

    Map workload and data flow before choosing services

    Create a unit-labeled workload, minimal-data flow, and explicit planning-assumption register.

  2. 2
    14 min

    Separate provider and customer responsibilities

    Produce a service-specific provider/customer matrix and a list of real-contract questions.

  3. 3
    14 min

    Grant each role only the necessary access

    Create task-based allowed/denied role cases and clearly mark the access matrix as design evidence.

  4. 4
    14 min

    Calculate unit costs and a stress budget

    Deliver independently checked baseline and stress costs, reserve totals, and a budget-review condition.

  5. 5
    14 min

    Plan recovery with RPO and RTO

    Create a recovery timeline and validation checklist with distinct RPO/RTO targets and unexecuted limits.

  6. 6
    19 min

    Choose an architecture with a supported decision

    Deliver a supported architecture decision with calculation evidence and unresolved real-service questions.

Use the tools

Tools to help you practice.

See all tools
ZIP · practice files

Plan a Cloud Service with Cost and Access Controls practice files

Supplied practice cases, a blank working record, complete lesson instructions, and annotated worked examples.

Text worksheet

Your course project worksheet

A downloadable text worksheet with each lesson’s working output, space for your answers, and the shared final-project checklist. Save your own copy.

Source transparency

Sources and further study.

Explore the references behind the lessons and take your learning further. Source notes explain access and reuse.

aws.amazon.com — shared responsibility model
Source & access notes · checked 2026-10-01

Relevant documented module/API behavior inspected during expansion authoring; actual execution evidence is recorded separately. No grant eligibility is established.

Access: Official page retrieved with the web reader on 2026-10-01. Documentation reading does not certify execution in every native tool or browser.

Reuse: Original local practice files, fictional data, worked examples and questions. Concepts paraphrased and linked; source exercises are not copied.

docs.cloud.google.com — cost optimization
Source & access notes · checked 2026-10-01

Relevant documented module/API behavior inspected during expansion authoring; actual execution evidence is recorded separately. No grant eligibility is established.

Access: Official page retrieved with the web reader on 2026-10-01. Documentation reading does not certify execution in every native tool or browser.

Reuse: Original local practice files, fictional data, worked examples and questions. Concepts paraphrased and linked; source exercises are not copied.

learn.microsoft.com — disaster recovery
Source & access notes · checked 2026-10-01

Relevant documented module/API behavior inspected during expansion authoring; actual execution evidence is recorded separately. No grant eligibility is established.

Access: Official page retrieved with the web reader on 2026-10-01. Documentation reading does not certify execution in every native tool or browser.

Reuse: Original local practice files, fictional data, worked examples and questions. Concepts paraphrased and linked; source exercises are not copied.

learn.microsoft.com — identity access
Source & access notes · checked 2026-10-01

Relevant documented module/API behavior inspected during expansion authoring; actual execution evidence is recorded separately. No grant eligibility is established.

Access: Official page retrieved with the web reader on 2026-10-01. Documentation reading does not certify execution in every native tool or browser.

Reuse: Original local practice files, fictional data, worked examples and questions. Concepts paraphrased and linked; source exercises are not copied.

Ready when you are

Start with the first useful move.

You’ll always know what to do, what to make, and where to go next.

Start lesson one