Securing Cloud Platforms Training in Thimphu, Bhutan

This course provides a comprehensive understanding of cloud security principles, architectures, and best practices for securing cloud platforms such as AWS, Azure, and Google Cloud Platform (GCP). Participants will learn about cloud security threats, compliance frameworks, identity and access management (IAM), data protection, and incident response in cloud environments. The course includes hands-on labs and real-world scenarios to strengthen practical knowledge.

Course Agenda

Introduction to Cloud Security

• Overview of Cloud Computing and Shared Responsibility Model

• Understanding Cloud Security Challenges and Threat Landscape

• Introduction to Cloud Security Frameworks (CIS, NIST, CSA CCM)

Identity and Access Management (IAM)

• Implementing IAM roles, policies, and permissions

• Multi-Factor Authentication (MFA) and Role-Based Access Control (RBAC)

• AWS IAM, Azure AD, and Google Cloud IAM Best Practices

• Securing API Access and Service Accounts

Securing Cloud Network Infrastructure

• Cloud Networking and Perimeter Security Controls

• Firewalls, Security Groups, and Network ACLs

• Zero Trust Security Model in Cloud

• DDoS Protection and Web Application Firewalls (WAFs)

Data Security and Encryption in Cloud

• Encryption at Rest, In Transit, and In Use

• AWS KMS, Azure Key Vault, and Google Cloud KMS

• Cloud Storage Security and Data Loss Prevention (DLP)

• Secure Backup and Disaster Recovery Strategies

Application Security in Cloud Environments

• Securing Containers and Kubernetes Clusters

• Serverless Security Risks and Mitigation Strategies

• Application Security Testing (SAST, DAST) in Cloud

• Threat Modeling and Secure DevOps (DevSecOps)

Compliance and Regulatory Considerations

• Cloud Security Compliance Standards (ISO 27001, SOC 2, PCI DSS, GDPR)

• Continuous Compliance Monitoring in Cloud Platforms

• Implementing Logging, Auditing, and Security Event Monitoring

Cloud Security Incident Response and Threat Detection

• SIEM Solutions in Cloud (AWS GuardDuty, Azure Sentinel, Chronicle Security)

• Cloud Forensics and Security Incident Handling

• Automated Threat Detection and Remediation in Cloud

• Incident Response Best Practices for Cloud Environments

Multi-Cloud and Hybrid Cloud Security

• Managing Security Across Multiple Cloud Providers

• Hybrid Cloud Security Architecture and Challenges

• Identity Federation and Single Sign-On (SSO) in Multi-Cloud

• Cloud Security Posture Management (CSPM) and Cloud Workload Protection (CWP)