CAP01 · Capstone studio
Multi-Tenant Cloud SaaS Capstone
Design and build a student-productivity SaaS with tenant isolation, CI/CD, IaC, observability and a teardown proof.
🎯 You will learn to
- Design for tenants
- Automate with CI/CD and IaC
- Prove cleanup
📘 Guided lab
This mission is a guided walkthrough: follow the steps on your own computer or practice account. The in-browser simulator for it is planned for a later release.
✅ Steps & checkpoints
🗺️ Platform architecture
Learners reach the web app through a CDN and WAF; the API checks identity, then uses the database, object storage and an isolated sandbox runner.
The 2D diagram shows the exact flow, ports and trust boundaries. The 3D scene is a concept view of the same parts; packets travel along the same arrows.
🤔 Think about it
Which tenant-isolation model would you pick for schools, and why?
🛡️ Safety & cost
Plan in mock mode first. Real deployments need a budget, least-privilege access and a teardown plan.
🧹 Cleanup
Destroy every environment and attach the empty-state proof to your README.
📚 Reference documents
- Threat modeling · OWASP
- Terraform documentation · HashiCorp
- Azure Well-Architected Framework · Microsoft Learn
- AWS Well-Architected Framework · AWS
Official sources, checked on 5 Nov 2026. Cloud services change often; check the official page before relying on a feature. All references