Cloud Security Fundamentals
Understand who secures what in the cloud, then audit the most common failure points: over-permissive IAM, exposed storage, open network rules, missing logs and unmanaged secrets. Vendor-neutral concepts with AWS-style examples so you can apply them on any provider.
- Level
- Beginner
- Study time
- 7 hours
- Lessons
- 5
- Practice labs
- 5
- Assessments
- 2
- Format
- Self-paced, online
What you will learn
By the end of this course you will be able to:
- Explain the shared responsibility model for IaaS, PaaS and SaaS
- Find over-permissive statements in an IAM policy
- Audit storage and network-security-group configurations for exposure
- Investigate suspicious console logins and key use in audit logs
- Produce a prioritised cloud hardening plan
Before you start
Basic networking and operating-system knowledge; no cloud experience needed
Tools you will use
Course outline
5 lessons in 2 modules.
Module 1: Cloud foundations
- The shared responsibility model
- IAM and least privilege
- Storage exposure and encryption
Module 2: Detect, protect, harden
- Network controls and secrets management
- Logging, monitoring and benchmark-style checks
Practice labs and assessments
Labs run in the browser as simulations. They never touch a real system.
5 practice labs
- Review the IAM policy JSON Beginner, 20 min
- Audit the bucket and security-group configuration Intermediate, 30 min
- Simulated cloud-CLI read-only audit Intermediate, 30 min
- CloudTrail-style log investigation Intermediate, 35 min
- Final: cloud hardening plan Advanced, 40 min, final lab
2 assessments
- Cloud security knowledge check
- Cloud security final quiz
The pass mark is 70%. You can retake an assessment.