Course Outline
DAY 1
Introduction and Cloud Architecture
- Define cloud computing
- Components of the cloud computing stack
- Cloud reference model and security
Infrastructure Security for Cloud Computing
- Understand the components of cloud infrastructure
- Evaluate the security implications of deployment models
- Benefits and drawbacks of virtualization
- Cloud management plane
- Security basics for different service models
Managing cloud computing security and risk
- Risk and governance
- Legal and compliance
- Audit
- Portability and interoperability
- Incident response
Data security for cloud
- Different cloud storage models
- Security issues for data in the cloud
- Addressing cloud security and governance
- Applying the lifecycle to use cases
- Discussing data encryption
Securing applications and users
- Application architecture design and operations lifecycle
- Discussing the impact on the SDLC
- Examining application security tools
- Discussing the role of compliance in the cloud
Cloud Risk assessment
- Adopting cloud computing
- Migrating existing apps and systems
Create and secure a public cloud
- Understanding public IaaS architectures
- Reviewing EC2 components
- Launching and connecting to your first instance
- Learning how to secure your instance
DAY 2
Encrypting an EBS volume
- Reasons for encryption
- Selecting a method
- Creating and attaching Amazon EBS
- Encrypting and formatting
- Understanding key management options
- Understanding the effects of rebooting
- Attaching an encrypted volume to another instance
Identity and access management
- Learning how to secure EC2 with AWS IAM
- Understanding federated identity architectures
- Implementing federated identity for applications using OpenID
- Applying the same principles in an enterprise production environment
Deploy and secure a Private Cloud
- Understanding private cloud architecture
- Reviewing OpenStack components
- Creating and connecting a compute node
- Managing OpenStack tenants and IAM
- Securing the OpenStack management plane
- Investigating hypervisor security
- Understanding security automation
Selecting Cloud services
- Enabling a security strategy
- Selecting a cloud provider
- Security as a service
- Summary and review
Testimonials (7)
A wide range of knowledge of the lecturer.
Marcin Szklarski - Santander Consumer Bank
Course - CCSK Plus (Certificate of Cloud Security Knowledge - Plus)
The presenter knowledge, way of speaking, sense of humour.
Rafal Kosz - EY
Course - CCSK Plus (Certificate of Cloud Security Knowledge - Plus)
Open discussions
Krzysztof Pytko - EY
Course - CCSK Plus (Certificate of Cloud Security Knowledge - Plus)
Trainer was calm, we had enough time to go through the subjects.
Andrzej Tarczynski - EY
Course - CCSK Plus (Certificate of Cloud Security Knowledge - Plus)
I enjoyed the trainer methods to attract our attention.
Antonio Osuna Sanchez - Blue Indico Investments, S.L.U.
Course - CCSK - Certificate of Cloud Security Knowledge - Plus
Ahmed was always trying to keep attention of us.
Alberto Brezmes - Blue Indico Investments, S.L.U.
Course - CCSK - Certificate of Cloud Security Knowledge - Plus
The trainer was very nice and available. I appreciated his knowledge, skills and preparation about the subject. Furthermore, he provided us extra content about IoT, very interesting.
