My Skill Lab
CybersecurityIntermediate

Cloud Security Fundamentals

IAM, misconfigurations, encryption and monitoring across AWS, Azure and GCP.

Taught by Prakash Shrestha · Cloud Solutions Architect

What you'll learn

  • Explain the shared responsibility model for IaaS, PaaS and SaaS and assign security tasks correctly
  • Write least-privilege IAM policies and roles in AWS, Azure and Google Cloud
  • Find and fix publicly exposed storage and overly open network rules
  • Protect data at rest with KMS-managed keys, envelope encryption and secrets managers
  • Enable audit logging and threat detection with CloudTrail, GuardDuty and Microsoft Defender for Cloud
  • Run CSPM and IaC scans with Prowler and Checkov and build a baseline from the CIS Benchmarks

About this course

Many cloud breaches need no clever exploit at all; they start with misconfigured storage, over-privileged identities and missing logs. This cloud security fundamentals course is for system administrators, developers, security analysts and anyone moving into a cloud security role across AWS, Microsoft Azure and Google Cloud. You will learn the shared responsibility model, write least-privilege IAM policies, lock down public storage such as Amazon S3 buckets, design security groups and firewall rules, and protect data with key management services like AWS KMS and Azure Key Vault. You will then switch on the logging and threat detection that tells you when something goes wrong, and use cloud security posture management (CSPM) and infrastructure-as-code scanning with tools such as Prowler and Checkov to catch misconfigurations before attackers do. You should know basic networking and the command line; examples use the AWS CLI, Terraform, the Azure CLI and gcloud.

Course content

7 lessons
  1. 1The Shared Responsibility ModelWhat your cloud provider secures, what you must secure, and why misconfiguration is the main cloud risk.Preview
  2. 2Cloud IAM Across AWS, Azure and Google CloudUsers, roles and policies in the three major clouds, and how to write least-privilege permissions.
  3. 3Storage Exposure and Common MisconfigurationsWhy public buckets keep leaking data, and how to lock down S3, Azure Blob and Cloud Storage for good.
  4. 4Network Security: Security Groups, NSGs and Firewall RulesDesign cloud network boundaries with security groups, private subnets and endpoints, defined as code.
  5. 5Encryption and Key Management with KMSEncrypt data at rest and in transit, use envelope encryption with KMS, and keep secrets out of code.
  6. 6Logging, Monitoring and Threat DetectionSwitch on audit logs, centralise them, and use managed threat detection to spot attacks early.
  7. 7CSPM, IaC Scanning and Your Security BaselineContinuously check cloud configuration with CSPM, scan Terraform before deploy, and build a baseline.