Course Outline
Day 1
Introduction and Cloud Architecture
- Defining cloud computing
- Components of the cloud computing stack
- Cloud reference models and security
Infrastructure Security for Cloud Computing
- Understanding cloud infrastructure elements
- Evaluating security impacts of deployment models
- Pros and cons of virtualization
- The cloud management plane
- Security fundamentals across different service models
Managing Cloud Computing Security and Risk
- Risk management and governance
- Legal and compliance considerations
- Auditing processes
- Portability and interoperability
- Incident response strategies
Data Security for Cloud
- Variations in cloud storage models
- Security challenges for data in the cloud
- Addressing cloud security and governance
- Applying data lifecycle to specific use cases
- Discussion on data encryption
Securing Applications and Users
- Application architecture design and operational lifecycle
- Impact on the SDLC
- Reviewing application security tools
- The role of compliance in the cloud
Cloud Risk Assessment
- Adopting cloud computing
- Migrating existing applications and systems
Creating and Securing a Public Cloud
- Understanding public IaaS architectures
- Reviewing EC2 components
- Launching and connecting to an initial instance
- Techniques for securing the instance
Day 2
Encrypting an EBS Volume
- Reasons for encryption
- Choosing an encryption method
- Creating and attaching Amazon EBS
- Encryption and formatting procedures
- Key management options
- Implications of rebooting
- Attaching encrypted volumes to other instances
Identity and Access Management
- Securing EC2 using AWS IAM
- Federated identity architectures
- Implementing federated identity with OpenID
- Applying these principles in enterprise production environments
Deploying and Securing a Private Cloud
- Private cloud architecture insights
- OpenStack components review
- Creating and connecting a compute node
- Managing OpenStack tenants and IAM
- Securing the OpenStack management plane
- Hypervisor security investigation
- Security automation concepts
Selecting Cloud Services
- Formulating a security strategy
- Choosing a cloud provider
- Security as a Service (SecaaS)
- Course summary and review
Testimonials (7)
A wide range of knowledge of the lecturer.
Marcin Szklarski - Santander Consumer Bank
Course - CCSK Plus (Certificate of Cloud Security Knowledge - Plus)
The presenter knowledge, way of speaking, sense of humour.
Rafal Kosz - EY
Course - CCSK Plus (Certificate of Cloud Security Knowledge - Plus)
Open discussions
Krzysztof Pytko - EY
Course - CCSK Plus (Certificate of Cloud Security Knowledge - Plus)
Trainer was calm, we had enough time to go through the subjects.
Andrzej Tarczynski - EY
Course - CCSK Plus (Certificate of Cloud Security Knowledge - Plus)
I enjoyed the trainer methods to attract our attention.
Antonio Osuna Sanchez - Blue Indico Investments, S.L.U.
Course - CCSK - Certificate of Cloud Security Knowledge - Plus
Ahmed was always trying to keep attention of us.
Alberto Brezmes - Blue Indico Investments, S.L.U.
Course - CCSK - Certificate of Cloud Security Knowledge - Plus
The trainer was very nice and available. I appreciated his knowledge, skills and preparation about the subject. Furthermore, he provided us extra content about IoT, very interesting.
