DevOps Professional · Module 4: DevSecOps and supply chain · Lab
Run the Fictional Leak Drill and Complete the Audit Trail
55 min hands-on · Advanced
A local fixture system with placeholder credentials (labeled fictional scenario); a timer for revoke and restore times. No real credentials anywhere in the exercise.
Local guide: run the steps below on your own machine in order, then check the validation list.
Objectives
- Revoke first with the time noted before analysis
- Rotate through overlap and verify everywhere
- Complete the audit trail with exposure window and actions
Step 1
Revoke first
On the scenario trigger, revoke the placeholder credential at its source before any analysis. Note the revoke time; the analysis runs parallel, never first.
Step 2
Rotate and verify
Narrow scope, add the replacement, migrate consumers one by one, revoke the old value, then probe every consumer: new works, old fails. Quote the everywhere result.
Step 3
Trail and automation
Complete the audit trail: what leaked, where, valid how long, revoked when, rotated when, verified how. Convert one finding into automation (shorter lifetime, detection rule), not a longer checklist.
How to confirm it worked
- Revoke time noted before analysis started
- Five rotation motions evidenced with everywhere-verified result
- Audit trail complete with exposure window, labeled fictional
- One automation action recorded with its owner