← Back to Projects
1 / 8
STORM — Azure IaC Incident Response Lab
An automated incident-response test environment on Azure. Deploy, simulate a compromise, contain it, and tear it all down — all defined in code and driven by a CI/CD pipeline.
TerraformAzureGitLab CI/CDIaCIncident ResponseRBAC
1 / 8STORM — Automated Incident Response Test Environment
Download the deck (.pptx)Source repository is private (internal internship project).
Highlights
- ▸Built an automated incident-response test environment on Azure using Terraform and GitLab CI/CD, cutting setup time from ~3 hours to ~10 minutes (over 90%) through a full deploy-to-destroy pipeline.
- ▸Developed automated containment actions — network isolation and identity disablement — that respond to a simulated compromise, demonstrated with before/after evidence from external reconnaissance scans.
- ▸Presented the project to SOC analysts, walking them through the automated setup and the engineering decisions and problem-solving behind it.
- ▸Applied cloud security best practices including RBAC authorization, secrets management via CI/CD variables, and least-privilege identity cleanup.