Certificate of Cloud Security Knowledge Training Course

DAY 1

Introduction and Cloud Architecture

• Defining cloud computing
• Components of the cloud computing stack
• Cloud reference models and security

Infrastructure Security for Cloud Computing

• Understanding cloud infrastructure components
• Evaluating the security implications of various deployment models
• Benefits and limitations of virtualization
• The cloud management plane
• Security fundamentals across different service models

Managing cloud computing security and risk

• Risk management and governance
• Legal and compliance considerations
• Audit processes
• Portability and interoperability
• Incident response strategies

Data security for cloud

• Varieties of cloud storage models
• Security challenges associated with cloud data
• Addressing cloud security and governance frameworks
• Applying data lifecycle concepts to real-world scenarios
• Examining data encryption practices

Securing applications and users

• Application architecture design and operational lifecycle
• Impact analysis on the SDLC
• Evaluation of application security tools
• The role of compliance in cloud environments

Cloud Risk assessment

• Adopting cloud computing strategies
• Migrating legacy applications and systems

Create and secure a public cloud

• Comprehending public IaaS architectures
• Overview of EC2 components
• Provisioning and connecting to an initial instance
• Implementing security measures for the instance

DAY 2

Encrypting an EBS volume

• Rationale for encryption
• Selecting appropriate encryption methods
• Creating and attaching Amazon EBS volumes
• Encryption and formatting procedures
• Key management options and strategies
• Assessing the impact of system reboots
• Linking encrypted volumes to additional instances

Identity and access management

• Securing EC2 resources using AWS IAM
• Understanding federated identity architectures
• Implementing federated identity for applications via OpenID
• Applying these principles to enterprise production settings

Deploy and secure a Private Cloud

• Analyzing private cloud architectures
• Examining OpenStack components
• Provisioning and connecting compute nodes
• Managing OpenStack tenants and IAM policies
• Hardening the OpenStack management plane
• Investigating hypervisor security
• Understanding security automation

Selecting Cloud services

• Formulating security strategies
• Evaluating and selecting cloud providers
• Security as a service models
• Course summary and final review