Course Summary
Protecting multi-cloud environments is a complex challenge. Default security controls are often inadequate, and what works in one of the major cloud service providers (CSPs) may not function the same way in another. Many cloud security controls are designed with compliance in mind, rather than being based on real-world attack scenarios. To safeguard an organization’s most critical cloud assets, attack-driven security controls are essential.
It’s important to accept that application flaws are inevitable, whether the application is developed internally or by a third party. This acceptance is key to building effective cloud security controls. While not all cybersecurity professionals can patch vulnerable application code, securing the cloud configuration is usually a more feasible way to mitigate these risks. Relying solely on a CSP’s default security settings and documentation is insufficient. SEC510 reveals numerous examples of incomplete, incorrect, or conflicting CSP controls. Moreover, if a zero-day vulnerability is discovered in a cloud service your organization uses, it’s crucial to prepare for its potential impact by focusing on what you can control.
Key topics include:
Evaluating and comparing public cloud service providers
Auditing, hardening, and securing public cloud environments
Introduction to multi-cloud compliance and integration
Cloud Data Protection
The candidate will demonstrate knowledge of key management systems and the processes required to assess and secure them. The candidate will also show familiarity with using encryption services to protect sensitive data stored in cloud platforms.
Cloud Identity and Access Management
The candidate will demonstrate an understanding of cloud Identity and Access Management (IAM), its security implications, and the necessary steps to secure IAM policies.
Cloud Integration and Benchmarking
The candidate will demonstrate familiarity with the tools and services used to audit cloud environments for compliance with various benchmarks. The candidate will also demonstrate best practices for storing long-term credentials and an understanding of cloud end-user identity management solutions and cloud single sign-on (SSO) solutions.
Multicloud and Credential Management Fundamentals
The candidate will demonstrate an understanding of the security concerns within the current public cloud landscape. The candidate will also demonstrate knowledge of instance metadata APIs, how these can be exploited in credential-based attacks, and how to assess their security.
Securely Accessing Cloud Services
The candidate will demonstrate familiarity with private service endpoints and securing remote administrative access to cloud platforms.
Securing Cloud Application Service Platforms
The candidate will demonstrate an understanding of cloud application services and how to secure common configurations. The candidate will also show familiarity with Google’s Firebase database offering and techniques for hardening its configurations.
Securing Cloud Storage Platforms
The candidate will demonstrate an understanding of how to secure cloud storage services and the data exfiltration risks associated with these services.
Securing Serverless Functions
The candidate will demonstrate familiarity with serverless architectures and how to assess these environments for security misconfigurations. The candidate will also demonstrate an understanding of how to secure serverless functions against persistence attacks.
Virtual Network Security and Logging
The candidate will demonstrate knowledge of default virtual private network settings and the steps required to secure them. The candidate will also show an understanding of virtual network logging and monitoring capabilities.
Other Popular Courses
CompTIA: SecurityX
- Duration: 5 Days
- Language: English
- Level: Advanced
- Exam: CAS-005
Executive Cyber Risk Certification (ECRC)
- Duration: 2 Days
- Language: English
- Level: Advanced
- Exam: ECRC
Mastering Communication & Presentation Te...
- Duration: 5 Days
- Language: Danish
- Level: Intermediate
- Exam: MCPT