Model Online / On-Site
Duration
Modules 5 modules

Course Objective & Scope

Most cloud breaches stem not from provider flaws, but from public storage buckets, leaked access keys and over-privileged IAM roles. This course teaches the preventive, detective and responsive controls needed to secure cloud workloads end to end.

Identity as the perimeter, keyless access via OIDC/Workload Identity, preventive guardrails with SCPs, Azure Policy and Org Policies, private endpoints and WAFs, KMS and envelope encryption, misconfiguration hunting with CSPM/CNAPP and threat detection across CloudTrail/Activity Logs are practised hands-on. Participants compile a cloud hardening and incident response checklist for their organisation.

Who Should Attend?

  • Cybersecurity, cloud security and SOC engineers defending cloud environments
  • Cloud architects, DevSecOps and platform teams building secure cloud foundations
  • Information security specialists responsible for cloud compliance and risk audits
  • Prerequisite: basic knowledge of cloud services (IAM, VPC/VNet, storage)

Key Takeaways

  • Eliminate over-privileged IAM roles, static access keys and privilege escalation paths
  • Enforce preventive guardrails across accounts using SCPs, Azure Policy or Organization Policies
  • Protect data at rest and in transit with KMS, BYOK, envelope encryption and Secret Managers
  • Shrink the network attack surface using PrivateLink/Private Endpoints, micro-segmentation and WAF
  • Prioritise CSPM/CNAPP findings and run cloud-native incident response using audit logs

Curriculum

Cloud Attack Surface, Shared Responsibility and Governance
  • Cloud kill chains (MITRE ATT&CK Cloud) and common misconfiguration risks
  • Multi-account security and preventive guardrails with SCPs, Azure Policy and Org Policies
Identity and Access Security (IAM & CIEM)
  • Least privilege, JIT/PIM access, ABAC and permission boundaries
  • Eliminating static keys: OIDC federation, Workload Identity and IMDSv2
Network Isolation and Edge Security
  • Zero Trust micro-segmentation, PrivateLink/Private Endpoints and egress filtering
  • WAF, DDoS protection services and secure hybrid/SASE connectivity
Data Protection, Encryption and Key Management
  • KMS, Cloud HSM, envelope encryption and key rotation
  • Blocking public S3/Blob/GCS access, data classification and secrets management
CSPM/CNAPP, Threat Detection and Cloud Incident Response
  • CIS Cloud Benchmarks and CSPM/CWPP/CNAPP (Security Hub, GuardDuty, Defender, Wiz)
  • CloudTrail/Activity Log analysis, forensic snapshots and automated quarantine playbooks

Other Courses in This Category

  • AWS Fundamentals: Core Services, Security and Cloud Operations

    Amazon Web Services (AWS) fundamentals: global infrastructure, IAM identity and access, VPC networking, EC2/ECS/Lambda compute, S3/EBS/RDS/DynamoDB storage, CloudWatch monitoring, the Well-Architected Framework and cost control.

    Cloud Technologies Corporate
    Live Course
    5 modules
    View
  • Microsoft Azure Fundamentals: Core Services, Governance and Operations

    Microsoft Azure fundamentals: Entra ID and RBAC, Management Group/Subscription/Resource Group hierarchy, VNet networking, Azure VMs, App Service and Container Apps, Blob Storage, Azure SQL/Cosmos DB, Azure Policy and cost management.

    Cloud Technologies Corporate
    Live Course
    5 modules
    View
  • Google Cloud (GCP) Fundamentals: Core Infrastructure, Data and Services

    Google Cloud Platform (GCP) fundamentals: Resource Hierarchy and IAM, global VPC networking, Compute Engine, Cloud Run and GKE, Cloud Storage, Cloud SQL/Spanner/Firestore, BigQuery analytics, Cloud Monitoring and cost management.

    Cloud Technologies Corporate
    Live Course
    5 modules
    View
  • Cloud Architecture: Designing Scalable, Resilient and Cost-Effective Systems

    Enterprise cloud architecture design: Well-Architected frameworks, landing zones and hub-and-spoke networking, high availability and DR (RPO/RTO), microservice and event-driven patterns, data tier selection and FinOps.

    Cloud Technologies Corporate
    Live Course
    5 modules
    View

Get in touch