Intermediate · Available now
Cloud & Automation Security
Identity, infrastructure and pipelines in the cloud.
Twelve lessons on securing cloud accounts: shared responsibility, IAM, storage, networking, logging, containers, infrastructure as code, CI/CD and incident response. Built for people who already know the fundamentals.
What you will be able to do
- Explain the cloud shared responsibility model
- Design least-privilege IAM roles and policies
- Recognise public storage and network exposure
- Use cloud audit logs for investigation
- Secure containers, IaC and CI/CD pipelines
- Run a basic cloud incident response
Curriculum
12 lessons · 147 minCloud foundations
The mental model and the controls that matter first.
- 11 min
IaaS, PaaS, SaaS and shared responsibility
Who secures what in each service model, and why the answer changes the controls you own.
- 13 min
IAM users, roles, policies and least privilege
How cloud permissions are evaluated, why roles beat long-lived keys and how to read a policy.
- 12 min
Object storage, public buckets and encryption
The misconfiguration behind many breaches, and the controls that prevent it.
Cloud network and observability
Connectivity, boundaries and the logs that show what happened.
- 13 min
VPCs, subnets, security groups and egress
How cloud networks isolate workloads, and why egress deserves as much attention as ingress.
- 12 min
CloudTrail, activity logs and monitoring
The control-plane evidence you need for detection and investigation.
- 13 min
Containers, Kubernetes and the shared kernel
What a container isolates, what it does not, and the Kubernetes defaults worth checking.
Automation and supply chain
The pipeline is production: secure the code that creates the cloud.
- 12 min
Infrastructure as code and drift
Terraform and friends make infrastructure reviewable, but also make one commit very powerful.
- 13 min
CI/CD pipelines, secrets and supply chain
How attackers abuse build systems, and the controls that keep a pipeline from becoming a backdoor.
- 12 min
Secrets management and key rotation
Why environment variables are not a vault, and how to rotate credentials without an outage.
Cloud assurance
Serverless, incidents and the architecture review that catches the expensive mistakes.
- 12 min
Serverless functions and event trust
No server to patch, but permissions, event sources and function identity still need care.
- 13 min
Cloud incident response and forensics
Contain a cloud identity or workload without destroying the audit trail you need.
- 11 min
Cost, resilience and architecture review
Ask the questions that find both security and availability problems before they ship.