Certificate of Cloud Security Knowledge Training Course

Introduction to Cloud Architecture

• Defining the concept of cloud computing
• Components of the cloud computing stack
• Cloud reference models and associated security considerations

Infrastructure Security in Cloud Computing

• Identifying key components of cloud infrastructure
• Evaluating the security implications of various deployment models
• Benefits and drawbacks of virtualization
• The role of the cloud management plane
• Fundamentals of security across different service models

Governing Cloud Security and Risk

• Risk management and governance frameworks
• Legal obligations and compliance requirements
• Auditing processes
• Ensuring portability and interoperability
• Incident response strategies

Data Security in the Cloud

• Overview of various cloud storage models
• Addressing security challenges for data residing in the cloud
• Implementing cloud security and governance policies
• Applying data lifecycle management to real-world use cases
• Exploring data encryption techniques

Protecting Applications and Users

• Application architecture design and operational lifecycle
• Assessing the impact on the Software Development Life Cycle (SDLC)
• Evaluating application security tools
• The role of compliance within cloud environments

Cloud Risk Assessment

• Adopting cloud computing solutions
• Migrating existing applications and systems

Establishing and Securing a Public Cloud

• Comprehending public IaaS architectures
• Analyzing EC2 components
• Launching and connecting to a first cloud instance
• Methods for securing cloud instances

Encrypting EBS Volumes

• The rationale for encryption
• Selecting appropriate encryption methods
• Creating and attaching Amazon EBS volumes
• Performing encryption and formatting tasks
• Understanding key management options
• Evaluating the impact of system reboots
• Attaching encrypted volumes to additional instances

Identity and Access Management

• Securing EC2 instances using AWS IAM
• Understanding federated identity architectures
• Implementing federated identity for applications via OpenID
• Applying these principles to enterprise production environments

Deploying and Securing a Private Cloud

• Comprehending private cloud architecture
• Reviewing OpenStack components
• Creating and connecting compute nodes
• Managing OpenStack tenants and IAM policies
• Securing the OpenStack management plane
• Investigating hypervisor security
• Understanding security automation

Choosing Cloud Services

• Formulating a security strategy
• Criteria for selecting a cloud provider
• Security as a Service (SecaaS)
• Course summary and review