Cloud Security

Hands-on securing of cloud-specific resources: IAM policy, workload security, and misconfiguration detection.

Concepts

Writing least-privilege access policies for cloud resources, and avoiding the common over-permissioning failure modes.

Securing what runs inside containers and the runtime environment around them — images, runtime behavior, and isolation.

Security groups, network ACLs, and private networking that control traffic flow within a cloud environment.

Continuously scanning cloud environments for misconfigurations before they're exploited.

Using cloud-native secrets services so credentials are never hardcoded, with automatic rotation.

What the cloud provider secures versus what the customer is responsible for — and why most cloud breaches fall on the customer's side.