Certificate of Cloud Security Knowledge Training Course

DAY 1

Overview and Cloud Architecture

• Establishing the definition of cloud computing
• Components of the cloud computing stack
• Cloud reference models and security considerations

Infrastructure Security in Cloud Environments

• Comprehending the elements of cloud infrastructure
• Evaluating the security impact of various deployment models
• Pros and cons of virtualization
• The cloud management plane
• Fundamentals of security across different service models

Oversight of Cloud Computing Security and Risk

• Risk management and governance frameworks
• Legal requirements and compliance
• Auditing processes
• Portability and interoperability standards
• Incident response protocols

Data Security in the Cloud

• Variations in cloud storage models
• Security challenges associated with cloud data
• Implementing cloud security and governance
• Applying data lifecycle management to practical cases
• Exploring data encryption techniques

Protecting Applications and Users

• Designing application architecture and operational lifecycles
• Examining the impact on the SDLC
• Analyzing application security tools
• Discussing the role of compliance in cloud environments

Cloud Risk Evaluation

• Adopting cloud computing technologies
• Migrating legacy applications and systems

Establishing and Securing a Public Cloud

• Gaining insight into public IaaS architectures
• Examining EC2 components
• Launching and connecting to an initial instance
• Acquiring skills to secure your instance

DAY 2

Encryption of EBS Volumes

• The rationale for encryption
• Choosing an appropriate method
• Creating and attaching Amazon EBS
• Encrypting and formatting the volume
• Grasping key management alternatives
• Understanding the impact of system reboots
• Attaching an encrypted volume to a separate instance

Identity and Access Management

• Learning how to protect EC2 instances using AWS IAM
• Understanding federated identity architectures
• Implementing federated identity for applications via OpenID
• Applying these principles within an enterprise production setting

Deployment and Security of a Private Cloud

• Comprehending private cloud architectures
• Reviewing OpenStack components
• Creating and linking a compute node
• Managing OpenStack tenants and IAM
• Securing the OpenStack management plane
• Exploring hypervisor security
• Understanding security automation

Choosing Cloud Services

• Developing a security strategy
• Selecting a suitable cloud provider
• Security as a Service (SecaaS)
• Conclusion and summary