Certificate of Cloud Security Knowledge Training Course

DAY 1

Introduction and Cloud Architecture

• Defining cloud computing
• Components of the cloud computing stack
• Cloud reference models and security

Infrastructure Security for Cloud Computing

• Comprehending cloud infrastructure elements
• Evaluating the security impact of various deployment models
• Pros and cons of virtualization
• The cloud management plane
• Foundational security across different service models

Managing Cloud Computing Security and Risk

• Risk management and governance
• Legal frameworks and compliance
• Auditing processes
• Portability and interoperability
• Incident response strategies

Cloud Data Security

• Variations in cloud storage models
• Security challenges for data in the cloud
• Addressing cloud security and governance
• Applying lifecycle concepts to real-world use cases
• Examining data encryption methods

Securing Applications and Users

• Application architecture design and operational lifecycle
• Impact on the Software Development Life Cycle (SDLC)
• Reviewing application security tools
• The role of compliance in cloud environments

Cloud Risk Assessment

• Adopting cloud computing solutions
• Migrating existing applications and systems

Building and Securing a Public Cloud

• Understanding public IaaS architectures
• Reviewing EC2 components
• Launching and connecting to your first instance
• Learning to secure your instance

DAY 2

Encrypting an EBS Volume

• Rationale for encryption
• Choosing an encryption method
• Creating and attaching Amazon EBS
• Encrypting and formatting the volume
• Understanding key management options
• Understanding the effects of rebooting
• Attaching the encrypted volume to another instance

Identity and Access Management

• Securing EC2 using AWS IAM
• Understanding federated identity architectures
• Implementing federated identity for applications using OpenID
• Applying these principles in enterprise production environments

Deploying and Securing a Private Cloud

• Understanding private cloud architectures
• Reviewing OpenStack components
• Creating and connecting a compute node
• Managing OpenStack tenants and IAM
• Securing the OpenStack management plane
• Investigating hypervisor security
• Understanding security automation

Selecting Cloud Services

• Establishing a security strategy
• Selecting a cloud provider
• Security as a Service (SecaaS)
• Summary and review