Cloud Security

About this course

This course teaches cloud security the way assessors actually work, across AWS, Azure and GCP. You start with the shared-responsibility model, then dig into the customer-side mistakes that cause most breaches: over-permissive IAM policies and leaked access keys, publicly exposed object storage, credential theft through an instance metadata SSRF, open security groups, and secrets left in serverless configuration. You learn to read audit logs for detection, enumerate an account and trace privilege-escalation paths, and finally harden everything with least privilege and account guardrails. Every exercise runs in your own free-tier account with billing alerts, for authorised, legal testing only, and a capstone asks you to assess and document that account end to end.