Introduction to Cloud Computing and Security

Today’s world of cyber security moves quickly. Cloud security moves even faster, so getting started or moving into a career in this field can be intimidating if you do not have the foundation to be successful. This course solves this problem by helping you to learn the foundational elements of modern cloud computing and security. his course focuses on Azure and AWS, and shows you how to interact with each cloud provider by familiarizing you with common terminology, cloud services, security concerns, and solutions to cloud-based security shortcomings.

Course Key Learnings:

• Make sense of different cloud-based services
• Understand and analyze risk in the cloud
• Interact with Azure and AWS environments using a browser and command line tools
• Change behavior and build a security-aware culture
• Deploy and integrate cloud services in AWS and Azure
• Get up to speed quickly on cloud security issues and terminology
• Detect and effectively respond to a simulated cloud breach
• Speak the same language as technical security professionals
• Learn how to automate common tasks using cloud shells
• Defend cloud services from attacks
• Track, audit and manage budgeting in your cloud environments

BUSINESS TAKE-AWAYS:

This course will help your organization:

• Develop professionals – technical or managerial – that know how to use AWS and Azure services
• Anticipate what cloud security threats are applicable to your business
• Learn how to mitigate threats
• Create a culture where security empowers the business to succeed

Course Content:

Module1: Account Set Up and Cloud Computing

Overview

The course starts with an introduction to both AWS and Azure by answering fundamental questions about the cloud: what it is, how it works, why its relevant, all while explaining pertinent vocabulary. The course continues by introducing common cloud services and highlighting how to interact with our cloud environments using both a web browser and the command line. With this foundation, the focus shifts to security concerns and detailing common mistakes which can lead to a breach. The section ends on the topic of budgeting and understanding how costs are calculated in a cloud computing environment.

Exercises

• Cloud Account Creation / Finalization
• Cloud Interfaces
• Introduction to the Command Line
• Billing and Cost Calculation

Topics

Introduction to Cloud Computing

• AWS and Azure account setup

Cloud Service Providers

• Terminology and vocabulary
• Common cloud services
• Cloud security case study

Cloud Interfaces

• GUI / Web Interface
• API Access
• CLI and Automation

Cost Calculation

• Understanding costs
• Controlling costs
• Budgeting and alerting

Module2: Compute, Storage, and Networking

Overview

Section two delves into service integration and deployment. We start they day by understanding common cloud-based services and the role they play in supporting the business. We then begin deploying services to both AWS and Azure, as well as configuring security controls to allow and restrict access into our environment. The exposure to new services continues with the implementation of cloud storage, in conjunction with cloud computing. Within the context of enabling common business functions, we integrate a functional website in each cloud service providers environment. Finally, within these newly deployed services, we work to understand the risk these actions inherently introduce, and work to limit that risk by implementing security monitoring and alerting controls.

Exercises

• VM Deployment
• Secure Storage Implementation
• Website Integration
• Alert Generation

Topics

Compute Services

• Virtualization and Autoscaling
• Image Selection
• Identity and Authentication
• Instance Deployment

Cloud Storage

• Availability
• Accessing Storage
• Storage Costs
• Storage integration

Business Needs

• Uptime
• Remote Access
• Security Controls
• Threat and Vulnerability Programs

Logging & Monitoring

• Log Sources
• Console Logging
• Portal Logging
• Monitoring and Alerting

Module3: Threats and Solutions

Overview

Section Three focuses on identifying threats facing cloud environments, and understanding solutions to deal with those threats. After suffering a simulated breach of our cloud environment, we learn hands-on exactly how to respond to the situation and research the root cause. With first-hand experience dealing with cloud service deployment, and the inherent risks of exposing our infrastructure, we work to understand how to harden our environment against attacks. Finally, we look at automated, cloud-native security solutions, and discuss common attacks and defenses we can then speak to with a close look at best practices.

Exercises

• Cloud IR
• Vulnerability Identification & Remediation
• Cloud Security Tools
• Attacking the Cloud

Topics

Incident Response

• Declaring an Incident
• Incident Impact
• Operational Security
• Administrative Controls

Hardening

• System Hardening
• Patching
• Risk Ranking
• Vulnerability Remediation

Cloud Native Security Solutions

• AWS Security Hub
• Microsoft Defender for Cloud
• Cloud Security Tools

Cloud Attacks and Defenses

• Common Attack Categories
• Defense Strategies
• Layered Security
• Cloud Security Best Practices

Who Should Attend