Cloud Security — AWS, Azure & GCP
Secure AWS, Azure and GCP — IAM, network isolation, key management, CSPM, policy-as-code, and multi-cloud threat detection.
100% Free · All lessons unlocked
Course Content
Foundations
Core concepts and groundwork
The Shared Responsibility Model across IaaS, PaaS and SaaS
Reading
The Cloud-Native Attack Surface — Misconfiguration as the #1 Risk
Reading
IAM Principles — Roles, Policies and Least Privilege at Scale
Reading
Cloud Security Posture Management (CSPM) Concepts
Reading
Multi-Cloud Governance and Landing Zone Design
Reading
Practice — Audit a Sample Cloud Account against CIS Benchmarks
Exercise
Core Skills
Essential techniques and patterns
AWS IAM — Policies, Roles, Permission Boundaries and SCPs
Reading
S3 Bucket Security — Public Access, Encryption and Policies
Reading
VPC Security — Security Groups, NACLs and Flow Logs
Reading
GuardDuty, Security Hub and Config for Continuous Monitoring
Reading
KMS — Key Management, Envelope Encryption and Rotation
Reading
Practice — Lock Down an Intentionally Vulnerable AWS Account
Exercise
Applied Practice
Hands-on, real-world scenarios
Azure AD / Entra ID — Conditional Access and Privileged Identity Management
Reading
Azure Security Baseline — NSGs, Key Vault and Defender for Cloud
Reading
GCP IAM — Organisation Policies and Resource Hierarchy
Reading
GCP Security Command Center and VPC Service Controls
Reading
Cross-Cloud Identity Federation and Workload Identity
Reading
Practice — Harden an Azure Resource Group with Defender for Cloud
Exercise
Advanced Topics
Deeper, more complex material
Container Image Security — Scanning and Minimal Base Images
Reading
Docker Security — Namespaces, Cgroups and Rootless Containers
Reading
Kubernetes RBAC, Network Policies and Pod Security Standards
Reading
Secrets Management in Kubernetes — Sealed Secrets and Vault
Reading
Runtime Security and Admission Controllers (OPA/Gatekeeper)
Reading
Practice — Secure a Kubernetes Cluster with RBAC and Policies
Exercise
Production & Scale
Building for the real world
Serverless Security — Lambda/Cloud Functions Attack Surface
Reading
Infrastructure as Code Security — Terraform Scanning with Checkov
Reading
Cloud-Native SIEM Patterns and Centralised Log Aggregation
Reading
Detecting and Responding to a Cloud Account Compromise
Reading
Cloud Cost-Abuse and Cryptomining Detection
Reading
Practice — Scan Terraform IaC and Remediate Misconfigurations
Exercise
Mastery & Capstone
Projects and final review
Project Brief — Secure Landing Zone for a Fintech Startup
Reading
Design IAM, Network Segmentation and Logging Strategy
Exercise
Implement Guardrails with Terraform and Policy-as-Code
Exercise
Deploy CSPM Monitoring and Incident Alerting
Exercise
Capstone — Submit Cloud Security Architecture Portfolio
Project
100% Free · All lessons unlocked
Topic Overview
What you'll learn
- Core concepts and fundamentals of Cloud Security — AWS, Azure & GCP
- Industry best practices and design patterns
- Hands-on exercises with real-world scenarios
- Performance optimization and advanced techniques
- Building production-ready applications