Cloud Security and Cybersecurity

Identity is the organising principle of this course, not networking. In cloud environments the perimeter is a policy decision rather than a physical boundary, and almost every significant breach traces back to a credential or a permission rather than a firewall rule. Delegates spend more time on identity and access than on any other topic.

Zero trust is taught against the actual reference frameworks rather than as a marketing term. NIST 800-207 and its seven tenets, the CISA Zero Trust Maturity Model with its five pillars, and the vendor interpretations that certification exams cite verbatim. Delegates who sit any major security exam should expect several zero trust scenario questions, where the wrong answer is almost invariably perimeter trust via VPN.

Machine and agent identity is treated as a first-class topic. Workload identity federation, short-lived credentials, secret rotation, and the emerging problem of shadow agents spawning credentials nobody can trace to an owner. If a machine identity cannot be mapped back to whatever created it, the audit trail is already broken.

The work is practical throughout. Delegates configure identity federation, write and break policies, deliberately misconfigure storage and then detect it, and run a tabletop incident response against a cloud compromise scenario.

Self-paced course

₹15,000

or start with ₹5,000 and pay the balance within 3 months

Pay in full ₹15,000

○ Lessons, videos and quizzes from ₹5,000
🔒 Lab recordings at ₹15,000
🔒 Certification exam at full payment
○ Optional real lab: ₹5,000 per month (after full payment)

Valid 12 months from your first payment. Refund policy

Responsible	XertApp
Last Update	10/11/2026
Completion Time	1 day 13 hours 30 minutes
Members	1

Course
Reviews

Career Courses Hot Skills DevOps & Security

Module 1 — Security foundations (empty)

5Lessons · 2 hr 30 min
- Confidentiality, integrity, availability and where cloud changes each
- Threat modelling and attack surface analysis
- The shared responsibility model across IaaS, PaaS and SaaS
- Risk assessment and treatment
- Security governance and programme structure
Module 2 — Identity and access management (empty)

7Lessons · 3 hr 30 min
- Authentication, authorisation and accounting in cloud
- Federation, SAML, OIDC and OAuth 2.0
- Single sign-on and conditional access
- Multi-factor authentication and phishing-resistant factors
- Privileged access management and just-in-time elevation
- Role design and least privilege at scale
- Permission analysis and detecting over-provisioning
Module 3 — Machine and agent identity (empty)

7Lessons · 3 hr 30 min
- Why non-human identities now outnumber human ones
- Service accounts, API keys and their lifecycle
- Workload identity federation and eliminating static credentials
- SPIFFE and SPIRE for workload identity
- Short-lived credentials and rotation
- AI agent identity and authorisation
- Shadow agents, untracked credentials and ownership mapping
Module 4 — Zero trust architecture (empty)

7Lessons · 3 hr 30 min
- NIST 800-207 and the seven tenets
- CISA Zero Trust Maturity Model: five pillars and maturity stages
- Vendor pillar models and their exam relevance
- Micro-segmentation and per-session access
- Zero trust network access against traditional VPN
- Continuous verification and dynamic policy
- Migrating an existing estate toward zero trust incrementally
Module 5 — Data security (empty)

7Lessons · 3 hr 30 min
- Classification and data lifecycle
- Encryption at rest, in transit and in use
- Key management: provider-managed, customer-managed and HSM
- Tokenisation and data loss prevention
- Storage misconfiguration and public exposure
- Data residency, sovereignty and cross-border transfer
- Training dataset governance for AI systems
Module 6 — Infrastructure and workload security (empty)

6Lessons · 3 hr
- Network security controls across providers
- Segmentation, private connectivity and egress control
- Compute hardening and image management
- Container and Kubernetes security
- Serverless security considerations
- Isolating training and inference pipelines
Module 7 — Application and supply chain security (empty)

7Lessons · 3 hr 30 min
- Secure development lifecycle and secure by design
- OWASP Top Ten in a cloud context
- API security
- DevSecOps and shifting left without blocking delivery
- Software bill of materials and provenance
- Dependency and third-party risk
- Prompt injection and AI application attack surface
Module 8 — Posture management and telemetry (empty)

6Lessons · 3 hr
- Cloud security posture management
- Cloud workload protection platforms
- Configuration drift and continuous compliance
- Cloud telemetry and security analytics
- SIEM design and log aggregation across providers
- Detection engineering and alert quality
Module 9 — Governance, risk and compliance (empty)

6Lessons · 3 hr
- CSA Cloud Controls Matrix and CAIQ
- ISO 27001, SOC 2 and provider attestations
- Regulatory frameworks and sector obligations
- Evidence collection from a distributed estate
- Vendor and cloud provider risk assessment
- AI governance, transparency and emerging obligations
Module 10 — Incident response (empty)

6Lessons · 3 hr
- Cloud incident response lifecycle
- Forensics and evidence preservation in ephemeral environments
- Credential compromise containment
- Ransomware in cloud estates
- Business continuity and recovery validation
- Tabletop exercise against a cloud compromise scenario
Module 11 — Provider-specific security (empty)

5Lessons · 2 hr 30 min
- AWS: IAM Identity Center, GuardDuty, Security Hub, Verified Access
- Azure: Entra ID, Conditional Access, Defender for Cloud, Sentinel, Purview
- Google Cloud: BeyondCorp, IAP, Context-Aware Access, VPC Service Controls
- OCI security services
- Mapping equivalent controls across providers
Certification guidance (empty)

6Lessons · 3 hr
- CCSK v5: open-book vendor-neutral foundation and its study material
- Provider specialty options and choosing one
- CCSP: experience requirements, waivers, and the August 2026 outline change
- Note that CCSP is delivered in person at test centres only
- Zero trust scenario question technique
- Sequencing a certification path against career stage

Who should attend

Aimed at practitioners responsible for securing cloud environments, or moving into that responsibility.

Security engineers and analysts moving into cloud
Cloud and infrastructure engineers taking on security ownership
DevOps engineers implementing DevSecOps practice
Identity and access management specialists
Architects designing secure cloud environments
Compliance and risk professionals needing technical grounding
Consultants advising clients on cloud security posture

Assumed knowledge: working familiarity with at least one cloud platform, plus networking, operating system and identity fundamentals. No prior security specialisation is required. Delegates should note that CCSP is experience-gated at five years cumulative IT experience with three in security, though CCSK or a relevant degree waives one year and an active CISSP waives the requirement entirely.

Delivery

Duration
40 hours, delivered as weekday evenings or weekend sessions.

Format
Live instructor-led online, with recordings available to delegates for the duration of the programme. On-site corporate delivery available on request.

Lab environment
Each delegate receives a cloud environment for security configuration and detection exercises, for the duration of the course and for four weeks afterwards.

Included
Course notes, lab guides, exercise solutions and a certificate of completion.

How to enroll

Enrol and pay online on this page. The full fee is ₹15,000 (US$170). You can start with ₹5,000 (US$60) and pay the balance in instalments within 3 months. Pay by card, UPI or net banking, or by PayPal in US dollars. Go to payment. For corporate, on-site or one-to-one training, contact contact@appsolworld.com or call +91 92051 38405.