Certificate of Cloud Security Knowledge Training Course

DAY 1

Introduction and Cloud Architecture

• Defining cloud computing
• Components of the cloud computing stack
• Cloud reference models and security considerations

Infrastructure Security for Cloud Computing

• Comprehending cloud infrastructure components
• Evaluating the security impact of deployment models
• Pros and cons of virtualization
• The cloud management plane
• Security fundamentals across different service models

Managing cloud computing security and risk

• Risk management and governance
• Legal and compliance requirements
• Audit procedures
• Portability and interoperability
• Incident response strategies

Data security for cloud

• Overview of distinct cloud storage models
• Security challenges for data in the cloud
• Implementing cloud security and governance frameworks
• Applying lifecycle concepts to specific use cases
• Strategies for data encryption

Securing applications and users

• Application architecture design and the operational lifecycle
• Impact on the Software Development Life Cycle (SDLC)
• Evaluation of application security tools
• The role of compliance in cloud environments

Cloud Risk assessment

• Adopting cloud computing solutions
• Migrating legacy applications and systems

Create and secure a public cloud

• Analyzing public IaaS architectures
• Reviewing EC2 components
• Provisioning and connecting to an initial instance
• Techniques for securing your instance

DAY 2

Encrypting an EBS volume

• Rationale for encryption
• Choosing the appropriate encryption method
• Creating and attaching Amazon EBS volumes
• Encryption and formatting procedures
• Key management options
• Implications of instance rebooting
• Connecting an encrypted volume to a different instance

Identity and access management

• Securing EC2 instances using AWS IAM
• Understanding federated identity architectures
• Implementing federated identity for applications via OpenID
• Scaling these principles to enterprise production environments

Deploy and secure a Private Cloud

• Analyzing private cloud architectures
• Reviewing OpenStack components
• Creating and connecting compute nodes
• Managing OpenStack tenants and IAM
• Hardening the OpenStack management plane
• Investigating hypervisor security
• Understanding security automation

Selecting Cloud services

• Developing a security strategy
• Evaluating and selecting a cloud provider
• Security as a Service (SecaaS)
• Course summary and final review