Certificate of Cloud Security Knowledge Training Course

DAY 1

Introduction and Cloud Architecture

• Defining cloud computing
• Components of the cloud computing stack
• Cloud reference models and security

Infrastructure Security for Cloud Computing

• Understanding cloud infrastructure elements
• Evaluating security impacts of deployment models
• Pros and cons of virtualization
• The cloud management plane
• Security fundamentals for various service models

Managing cloud computing security and risk

• Risk management and governance
• Legal and compliance considerations
• Auditing processes
• Portability and interoperability
• Incident response strategies

Data security for cloud

• Variations in cloud storage models
• Security challenges for data in the cloud
• Implementing cloud security and governance
• Applying the data lifecycle to real-world scenarios
• Discussion on data encryption

Securing applications and users

• Application architecture design and operational lifecycle
• Impact on the Software Development Life Cycle (SDLC)
• Evaluating application security tools
• The role of compliance in the cloud

Cloud Risk assessment

• Adopting cloud computing solutions
• Migrating existing applications and systems

Create and secure a public cloud

• Comprehending public IaaS architectures
• Reviewing EC2 components
• Launching and connecting to an initial instance
• Learning methods to secure instances

DAY 2

Encrypting an EBS volume

• Reasons for encryption
• Choosing an encryption method
• Creating and attaching Amazon EBS
• Encryption and formatting procedures
• Key management options
• Impact of system reboots
• Connecting an encrypted volume to another instance

Identity and access management

• Securing EC2 using AWS IAM
• Federated identity architectures
• Implementing federated identity for apps via OpenID
• Applying these principles in enterprise production environments

Deploy and secure a Private Cloud

• Private cloud architecture fundamentals
• Reviewing OpenStack components
• Creating and connecting compute nodes
• Managing OpenStack tenants and IAM
• Securing the OpenStack management plane
• Hypervisor security investigation
• Security automation concepts

Selecting Cloud services

• Establishing a security strategy
• Choosing a cloud provider
• Security as a Service models
• Course summary and review