Certificate of Cloud Security Knowledge Training Course

DAY 1

Introduction and Cloud Architecture

• Definition of cloud computing
• Components of the cloud computing stack
• Cloud reference models and security considerations

Infrastructure Security for Cloud Computing

• Comprehension of cloud infrastructure elements
• Evaluation of security implications across deployment models
• Benefits and drawbacks of virtualization
• The cloud management plane
• Security fundamentals for distinct service models

Managing cloud computing security and risk

• Risk management and governance frameworks
• Legal and compliance requirements
• Auditing processes
• Portability and interoperability standards
• Incident response strategies

Data security for cloud

• Variations in cloud storage models
• Security challenges for data within the cloud
• Addressing cloud security and governance protocols
• Application of data lifecycle concepts to use cases
• Discussion on data encryption methods

Securing applications and users

• Application architecture design and operational lifecycle
• Impact on the Software Development Life Cycle (SDLC)
• Assessment of application security tools
• The role of compliance within the cloud environment

Cloud Risk assessment

• Adopting cloud computing strategies
• Migrating existing applications and systems

Create and secure a public cloud

• Understanding public IaaS architectures
• Review of EC2 components
• Launching and connecting to the initial instance
• Techniques for securing the instance

DAY 2

Encrypting an EBS volume

• Rationale for encryption
• Selection of encryption methods
• Creation and attachment of Amazon EBS volumes
• Encryption and formatting procedures
• Overview of key management options
• Implications of system reboots
• Attaching encrypted volumes to separate instances

Identity and access management

• Securing EC2 instances using AWS IAM
• Understanding federated identity architectures
• Implementing federated identity for applications via OpenID
• Application of these principles in enterprise production environments

Deploy and secure a Private Cloud

• Understanding private cloud architectures
• Review of OpenStack components
• Creation and connection of compute nodes
• Management of OpenStack tenants and IAM
• Securing the OpenStack management plane
• Investigation of hypervisor security
• Understanding security automation

Selecting Cloud services

• Formulating a security strategy
• Evaluating and selecting a cloud provider
• Security as a Service concepts
• Course summary and review