Certificate of Cloud Security Knowledge Training Course

DAY 1

Introduction and Cloud Architecture

• Defining cloud computing
• Components of the cloud computing stack
• Cloud reference models and security considerations

Infrastructure Security for Cloud Computing

• Understanding cloud infrastructure components
• Evaluating the security impact of different deployment models
• Benefits and drawbacks of virtualization
• The cloud management plane
• Security fundamentals across various service models

Managing cloud computing security and risk

• Risk management and governance
• Legal and compliance obligations
• Auditing processes
• Portability and interoperability
• Incident response strategies

Data security for cloud

• Variations in cloud storage models
• Security challenges for data within the cloud
• Aligning cloud security with governance frameworks
• Applying data lifecycle concepts to specific use cases
• Exploring data encryption methods

Securing applications and users

• Application architecture design and operational lifecycles
• Impact on the Software Development Life Cycle (SDLC)
• Evaluating application security tools
• The role of compliance in cloud environments

Cloud Risk assessment

• Adopting cloud computing
• Migrating existing applications and systems

Create and secure a public cloud

• Comprehending public IaaS architectures
• Examining EC2 components
• Launching and connecting to a first instance
• Methods for securing an instance

DAY 2

Encrypting an EBS volume

• The rationale for encryption
• Selecting an appropriate method
• Creating and attaching Amazon EBS
• Encrypting and formatting volumes
• Key management options
• Understanding the impact of rebooting
• Attaching encrypted volumes to different instances

Identity and access management

• Securing EC2 instances using AWS IAM
• Understanding federated identity architectures
• Implementing federated identity for applications via OpenID
• Applying these principles to enterprise production environments

Deploy and secure a Private Cloud

• Understanding private cloud architectures
• Reviewing OpenStack components
• Creating and connecting a compute node
• Managing OpenStack tenants and IAM
• Securing the OpenStack management plane
• Investigating hypervisor security
• Understanding security automation

Selecting Cloud services

• Enabling a security strategy
• Choosing a cloud provider
• Security as a Service
• Summary and review