Skill map
Cloud security
Applies identity, least privilege, workload protection, and policy controls. As Cloud Engineer needs it.
Cloud security skill map
Careers that require it
- Cloud EngineerImportance 5 of 5
- Security EngineerImportance 4 of 5
Courses that teach it
HOWTOs
Concrete operational procedures from the courses on this page.
- How to contain a leaked cloud access key or compromised cloud identity
Disabling the credential, revoking the temporary sessions it already started, and scoping the principals, identity providers, and resources an attacker may have created for persistence, across AWS, Microsoft Entra, and Google Cloud.
Cloud Security
- How to scope and contain a compromised cloud compute instance
Isolating one compromised virtual machine without destroying evidence: the order of memory capture, disk snapshots, network isolation, and revoking the instance's own cloud credentials, then rebuilding from a known-good image rather than cleaning in place.
Cloud Security