Certificate of Cloud Security Knowledge Training Course

DAY 1

Introduction and Cloud Architecture

• Defining cloud computing
• Components of the cloud computing stack
• Cloud reference models and security

Infrastructure Security for Cloud Computing

• Understanding cloud infrastructure components
• Evaluating security implications of deployment models
• Pros and cons of virtualization
• The cloud management plane
• Security basics across different service models

Managing Cloud Computing Security and Risk

• Risk and governance
• Legal and compliance considerations
• Auditing
• Portability and interoperability
• Incident response

Data Security for the Cloud

• Various cloud storage models
• Security challenges for data in the cloud
• Addressing cloud security and governance
• Applying data lifecycle concepts to use cases
• Data encryption discussions

Securing Applications and Users

• Application architecture design and operational lifecycle
• Impact on the SDLC
• Examining application security tools
• The role of compliance in the cloud

Cloud Risk Assessment

• Adopting cloud computing
• Migrating existing apps and systems

Creating and Securing a Public Cloud

• Understanding public IaaS architectures
• Reviewing EC2 components
• Launching and connecting to an initial instance
• Securing your instance

DAY 2

Encrypting an EBS Volume

• The rationale for encryption
• Selecting an encryption method
• Creating and attaching Amazon EBS
• Encrypting and formatting volumes
• Key management options
• Effects of rebooting
• Attaching encrypted volumes to other instances

Identity and Access Management

• Securing EC2 with AWS IAM
• Understanding federated identity architectures
• Implementing federated identity for applications using OpenID
• Applying these principles in an enterprise production environment

Deploying and Securing a Private Cloud

• Understanding private cloud architecture
• Reviewing OpenStack components
• Creating and connecting a compute node
• Managing OpenStack tenants and IAM
• Securing the OpenStack management plane
• Hypervisor security investigation
• Understanding security automation

Selecting Cloud Services

• Enabling security strategy
• Choosing a cloud provider
• Security as a service
• Summary and review