Course Summary
Protecting multi-cloud environments is a complex challenge. Default security controls are often inadequate, and what works in one of the major cloud service providers (CSPs) may not function the same way in another. Many cloud security controls are designed with compliance in mind, rather than being based on real-world attack scenarios. To safeguard an organization’s most critical cloud assets, attack-driven security controls are essential.
It’s important to accept that application flaws are inevitable, whether the application is developed internally or by a third party. This acceptance is key to building effective cloud security controls. While not all cybersecurity professionals can patch vulnerable application code, securing the cloud configuration is usually a more feasible way to mitigate these risks. Relying solely on a CSP’s default security settings and documentation is insufficient. SEC510 reveals numerous examples of incomplete, incorrect, or conflicting CSP controls. Moreover, if a zero-day vulnerability is discovered in a cloud service your organization uses, it’s crucial to prepare for its potential impact by focusing on what you can control.
Key topics include:
Evaluating and comparing public cloud service providers
Auditing, hardening, and securing public cloud environments
Introduction to multi-cloud compliance and integration
Cloud Data Protection
The candidate will demonstrate an understanding of key management systems and the steps necessary to assess and secure them. The candidate will demonstrate familiarity with using encryption services to secure sensitive data stored in cloud platforms.
Cloud Identity and Access Management
The candidate will demonstrate an understanding of cloud Identity and Access Management (IAM), its security concerns, and the steps necessary to secure IAM policies.
Cloud Integration and Benchmarking
The candidate will demonstrate familiarity with the tools and services available to audit cloud environments for compliance with various benchmarks. The candidate will demonstrate familiarity with best practices for storinglong-term credentials. The candidate will demonstrate an understanding of cloud end-user identity management solutions and cloud single sign-on solutions.
Multicloud and Credential Management Fundamentals
The candidate will demonstrate an understanding of the security concerns of the current public cloud landscape. The candidate will demonstrate an understanding of instance metadata APIs, how they can be used in credential-based attacks, and how to assess their security.
Securely Accessing Cloud Services
The candidate will demonstrate familiarity with private service endpoints and with securing remote administrative access to cloud platforms.
Securing Cloud Application Service Platforms
The candidate will demonstrate familiarity with cloud application services and how to harden common configurations. The candidate will demonstrate an understanding of Google’s Firebase database offering and how to harden common configurations.
Securing Cloud Storage Platforms
The candidate will demonstrate an understanding of how to secure cloud storage services. The candidate will demonstrate an understanding of the data exfiltration risks associated with these services.
Securing Serverless Functions
The candidate will demonstrate familiarity with serverless architectures and how to assess these environments for security misconfigurations.The candidate will demonstrate an understanding of how to harden serverless functions against persistence attacks.
Virtual Network Security and Logging
The candidate will demonstrate an understanding of default virtual private network settings and the steps necessary to secure them. The candidate will demonstrate an understanding of virtual network logging and monitoring capabilities.
Other Popular Courses
Mastering Communication & Presentation Te...
- Duration: 4 Days
- Language: Danish
- Level: Intermediate
- Exam: MCPT
Next Generation Mindfulness
- Duration: 1 Days
- Language: English
- Level: Foundation
- Exam: NGM
Nutanix Multicloud Infrastructure Design (NMC...
- Duration: 1 Days
- Language: English
- Level: Advanced
- Exam: Nutanix Certifi