SANS - SEC545 Cloud Security Architecture and Operations

* Understand all major facets of cloud risk, including threats, vulnerabilities, and impact
* Articulate the key security topics and risks associated with SaaS, PaaS, and IaaS cloud deployment models
* Evaluate Cloud Access Security Brokers to better protect and monitor SaaS deployments
* Evaluate Secure Access Service Edge to help with cloud architecture design
* Build security for all layers of a hybrid cloud environment, starting with hypervisors and working up to application layer controls
* Evaluate basic virtualization hypervisor security controls
* Design and implement network security access controls and monitoring capabilities in a public cloud environment
* Design a hybrid cloud network architecture that includes IPSec tunnels
* Integrate cloud identity and access management into security architecture
* Evaluate and implement various cloud encryption types and formats
* Develop multi-tier cloud architectures in a virtual private cloud using subnets, availability zones, gateways, and NAT
* Integrate security into DevOps teams, effectively creating a DevSecOps team structure
* Build automated deployment workflows with 3rd-party and native tools in all major cloud environments
* Incorporate vulnerability management, scanning, and penetration testing into cloud environments
* Build automated and flexible detection and response programs using tools like AWS-IR, CloudWatch, CloudTrail, and AWS Lambda
* Leverage the AWS CLI to automate and easily execute operational tasks
* Set up and use an enterprise automation platform, Ansible, to automate configuration and orchestration tasks
* Use CloudWatch, CloudFormation, and other automation tools to integrate automated security controls into your cloud security program
Homepage
https://www.sans.org/cyber-security-courses/cloud-security-architecture-and-operations/