Cloud Security & Compliance (AWS · Azure · GCP)

What you will be able to do

• You will be able to explain the shared responsibility model and correctly assign security tasks between the cloud provider and the customer for IaaS, PaaS, and SaaS.
• You will be able to design least-privilege identity and access controls using IAM roles, policies, and federation across AWS, Azure, and GCP.
• You will be able to apply core security controls for network segmentation, encryption at rest and in transit, and centralized logging.
• You will be able to assess a cloud environment's posture using CSPM concepts and prioritize findings by real risk.
• You will be able to map cloud configurations to the CIS Benchmarks and the provider well-architected frameworks and document the gaps.
• You will be able to compare equivalent security services across the three major providers and avoid common multi-cloud mistakes.
• You will be able to build a cloud monitoring and incident response capability and run a structured investigation using cloud-native logs.

What is inside

4 modules, 8 lessons. Each module ends in a graded quiz and most carry an assignment.

1. 01

   Foundations: Shared Responsibility and the Cloud Threat Model

   Start with the mental model that governs every cloud security decision: who is responsible for what. You will learn how the shared responsibility model shifts across service types and how the cloud threat model differs from on-premises.

   2 lessons · 5 quiz questions

2. 02

   Core Cloud Security Controls

   This module covers the technical controls that do most of the work: identity and access management, network segmentation, encryption, and logging. You will learn how each control maps across AWS, Azure, and GCP and how they fit together.

   2 lessons · 5 quiz questions · assignment

3. 03

   Posture Management and Compliance Mapping

   Learn how to continuously assess whether your cloud is actually configured securely using CSPM, and how to map those configurations to recognized standards like the CIS Benchmarks and the provider well-architected frameworks. This is where security meets the audit.

   2 lessons · 5 quiz questions

4. 04

   Cloud Monitoring, Detection, and Incident Response

   Controls and posture management reduce risk, but you must also detect and respond when something happens. This module covers cloud-native threat detection, building a monitoring pipeline, and running a structured incident response across the three providers.

   2 lessons · 5 quiz questions · assignment