Certificate of Cloud Security Knowledge Training Course

DAY 1

Introduction and Cloud Architecture

• Establish the definition of cloud computing
• Identify the constituent elements of the cloud computing stack
• Examine the cloud reference model with a focus on security controls

Infrastructure Security for Cloud Computing

• Comprehend the foundational components of cloud infrastructure
• Evaluate the security implications associated with various deployment models
• Analyze the benefits and limitations of virtualization
• Define the cloud management plane
• Review fundamental security concepts across different service models

Managing cloud computing security and risk

• Integrate risk management with governance frameworks
• Address legal requirements and regulatory compliance
• Implement audit procedures
• Ensure portability and interoperability
• Develop incident response capabilities

Data security for cloud

• Compare distinct cloud storage architectures
• Identify security challenges related to data residency in the cloud
• Align cloud security protocols with organizational governance
• Apply data lifecycle principles to specific operational use cases
• Assess the role of data encryption

Securing applications and users

• Review application architecture design and the operational lifecycle
• Assess the impact on the software development life cycle (SDLC)
• Evaluate the efficacy of application security tools
• Discuss the significance of compliance within cloud environments

Cloud Risk assessment

• Strategies for adopting cloud computing services
• Protocols for migrating existing applications and systems

Create and secure a public cloud

• Analyze public IaaS architectural patterns
• Examine Amazon EC2 components
• Initiate and establish connectivity to a virtual instance
• Apply security measures to harden the instance

DAY 2

Encrypting an EBS volume

• Rationale for implementing encryption
• Selecting an appropriate encryption methodology
• Provisioning and attaching an Amazon EBS volume
• Encrypting and formatting the storage volume
• Evaluating key management options
• Understanding the operational effects of instance rebooting
• Attaching an encrypted volume to an additional instance

Identity and access management

• Implementing AWS IAM to secure EC2 resources
• Comprehending federated identity architectures
• Integrating federated identity for applications using OpenID
• Applying these principles to enterprise production environments

Deploy and secure a Private Cloud

• Understanding private cloud architecture
• Reviewing OpenStack components
• Creating and connecting a compute node
• Managing OpenStack tenants and IAM policies
• Hardening the OpenStack management plane
• Investigating hypervisor security mechanisms
• Understanding security automation for for government operations

Selecting Cloud services

• Enabling a comprehensive security strategy
• Criteria for selecting a cloud service provider
• Evaluating Security as a Service models
• Summary and course review