Certificate of Cloud Security Knowledge Training Course

DAY 1

Introduction and Cloud Architecture

• Defining the scope of cloud computing
• Components of the cloud computing stack
• Cloud reference models and security frameworks

Infrastructure Security for Cloud Computing

• Comprehending the elements of cloud infrastructure
• Evaluating security implications across various deployment models
• Benefits and limitations of virtualization
• The cloud management plane
• Security fundamentals for distinct service models

Managing cloud computing security and risk

• Risk management and governance
• Legal frameworks and compliance
• Audit procedures
• Portability and interoperability standards
• Incident response strategies

Data security for cloud

• Varied cloud storage models
• Security challenges for data residing in the cloud
• Addressing cloud security governance
• Applying lifecycle management to specific use cases
• Data encryption methodologies

Securing applications and users

• Application architecture design and operational lifecycles
• Impact on the Software Development Life Cycle (SDLC)
• Evaluation of application security tools
• The role of compliance in cloud environments

Cloud Risk assessment

• Adopting cloud computing solutions
• Migrating existing applications and systems

Create and secure a public cloud

• Understanding public IaaS architectures
• Reviewing EC2 components
• Launching and connecting to an initial instance
• Securing your instance configuration

DAY 2

Encrypting an EBS volume

• Rationale for encryption
• Selecting appropriate encryption methods
• Creating and attaching Amazon EBS volumes
• Encryption and formatting processes
• Key management options and considerations
• Implications of rebooting on encrypted volumes
• Attaching encrypted volumes to alternative instances

Identity and access management

• Securing EC2 resources using AWS IAM
• Understanding federated identity architectures
• Implementing federated identity for applications using OpenID
• Applying these principles within enterprise production environments

Deploy and secure a Private Cloud

• Grasping private cloud architecture
• Reviewing OpenStack components
• Creating and connecting compute nodes
• Managing OpenStack tenants and IAM
• Securing the OpenStack management plane
• Investigating hypervisor security
• Understanding security automation

Selecting Cloud services

• Enabling a robust security strategy
• Criteria for selecting a cloud provider
• Security as a Service (SecaaS)
• Course summary and final review