Securing Cloud Operations

Learn hands-on cloud security for AWS, Azure, and GCP. Configure IAM, firewalls, and encryption; enable GuardDuty and Defender; and map controls to CIS, ISO, and NIST frameworks to build and audit secure, compliant cloud operations.

Interested in this course? Email us at [email protected]

Course curriculum

1. Segment 00 - Introduction to Course
2. Segment 01 - Identify IaaS_ PaaS_ and SaaS Services
3. Segment 02 - Compare Cloud Providers and Launch Core Services
4. Segment 03 - Multi-Cloud Zero Trust Architecture
5. Segment 04 - Reading: Service-Model Cheat-Sheet
1. Segment 05 - Recognize the Components of a Virtual Machine
2. Segment 06 - Explore Database and Object Storage Options
3. Segment 07 - Visualize Cloud Networking and Firewall Concepts
4. Segment 08 - Reading: Glossary: Compute-Storage-Network
1. Segment 09 - Explain Shared Responsibility Using Pizza-as-a-Service
2. Segment 10 - Create a Least-Privilege IAM User
3. Segment 11 - Enable Multi-Factor Authentication (MFA) on an Account
4. Segment 12 - Reading: Step-by-Step IAM Setup
5. Segment 13 - Quiz - Apply Shared Responsibility and Set Up IAM Basics
6. Segment 14 - Hands-On-Learning: Building a Shared Responsibility Matrix in the Cloud
1. Segment 15 - Chapter Introduction
2. Segment 16 - Launch a Secure OS Image from a Trusted Source
3. Segment 17 - Enable Automatic Patching and Logging
4. Segment 18 - Configure SSH Key-Based Access and Disable Passwords
1. Segment 19 - Explain Port Rules with Real-World Analogies
2. Segment 20 - Build a Web-Only Security Group
3. Segment 21 - Validate Security Group Rules Using cURL and Analyzer Tools
4. Segment 22 - Reading: Security-Group Starter Template
1. Segment 23 - Enable Encryption at Rest Using Managed Keys
2. Segment 24 - Prevent Public Access to Bucket
3. Segment 25 - Set Up Backup and Snapshot Schedules
4. Segment 26 - Reading: Storage Safety Checklist
5. Segment 27 - Quiz - Protect Data in Databases and Storage Buckets
6. Segment 28 - Hands-On-Learning - Designing a Secure Cloud Architecture with Compute, Network, and Storage Controls
1. Segment 29 - Activate Guard Duty_ Azure Defender_ or Google SCC
2. Segment 30 - Interpret Sample Security Findings
3. Segment 31 - Triage Low-Severity and False Positive Alerts (1)
1. Segment 32 - Enable Logging for Cloud API Activity
2. Segment 33 - Search Logs for Risky Events (e.g._ DeleteStop)
3. Segment 34 - Export Logs for Retention and Audit
4. Segment 35 - Reading: Log Query Cheat-Sheet
1. Segment 36 - Revoke Compromised Access Keys Immediately
2. Segment 37 - Capture a Snapshot for Forensic Analysis
3. Segment 38 - Complete a Post-Mortem Using a Simple Template
4. Segment 39 - Reading: One-Page IR Checklist
5. Segment 40 - Quiz - Respond to Incidents with Minimal Tools
1. Segment 41 - Compare Popular Security Frameworks
2. Segment 42 - Apply the CIS Ubuntu Benchmark to a VM
3. Segment 43 - Use a Matrix to Map Controls Across Frameworks
4. Segment 44 - Reading: CIS “Essential Eight” Summary
1. Segment 45 - Tag Cloud Resources for Ownership and Cost Tracking
2. Segment 46 - Generate Cost and Compliance Reports
3. Segment 47 - Enforce “No Public Buckets” with a Config Rule
4. Segment 48 - Reading: Starter Tag Kit (CSV)
1. Segment 49 - Review the 10 Must-Do Security Controls
2. Segment 50 - Complete a Capstone Self-Audit Using a Checklist
3. Segment 51 - Explore Certification and Learning Paths
4. Segment 52 - Hands-On-Learning - Building a Compliance & Cost Dashboard for Cloud Governance
5. Segment 53 - Quiz Conduct a Final Security Review and Plan Next Steps
6. Segment 54 - Project - Cloud Security Operations
7. Segment 55 - Course Wrap-up Video

About this course

Free
56 lessons
5 hours of video content

Discover your potential, starting today

Enroll today

Securing Cloud Operations

Course curriculum

Chapter 1: Understand Cloud Service Models (IaaS, PaaS, SaaS)

Chapter 2: Classify Compute, Storage, and Networking Resources

Chapter 3: Apply Shared Responsibility and Set Up IAM Basics

Chapter 4: Harden a Virtual Machine Before Use

Chapter 5: Control Network Access with Security Groups and Firewalls

Chapter 6: Protect Data in Databases and Storage Buckets

Chapter 7: Detect Threats Using Built-In Security Tools

Chapter 8: Investigate Cloud Activity with Logs

Chapter 9: Respond to Incidents with Minimal Tools

Chapter 10: Map Security Controls to CIS, ISO 27001, and NIST CSF

Chapter 11: Automate Governance with Tags and Config Rules

Chapter 12: Conduct a Final Security Review and Plan Next Steps

About this course

Discover your potential, starting today