Month 10 – Cloud Security

 

Month 10 – Cloud Security

Note: This module teaches students how to secure cloud environments, manage user access, protect cloud data, and monitor cloud resources.

TopicWhat I Will DiscussToolWhat We Use the Tool ForPracticalTheory AssessmentPractical Assessment
Introduction to Cloud ComputingWhat cloud computing is, cloud service models (IaaS, PaaS, SaaS), deployment models (Public, Private, Hybrid).AWS Free TierTo learn cloud computing in a real cloud environment.Create an AWS Free Tier account and explore the dashboard.Define cloud computing and explain its service models.Successfully navigate the AWS Management Console.
Amazon Web Services (AWS)AWS services, regions, availability zones, EC2, S3, IAM.AWS Free TierTo build and manage cloud resources.Create an S3 bucket and upload sample files.Explain the purpose of EC2, S3, and IAM.Create and manage an S3 bucket successfully.
Microsoft AzureAzure services, virtual machines, storage accounts, Azure portal.Microsoft AzureTo deploy and manage cloud resources on Azure.Create a Resource Group and a Storage Account.Explain Azure Resource Groups and Storage Accounts.Deploy cloud resources successfully.
Google Cloud Platform (GCP)GCP services, Compute Engine, Cloud Storage, IAM.Google Cloud PlatformTo learn Google Cloud services.Create a Cloud Storage bucket.Explain the core services of GCP.Successfully configure a storage bucket.
Identity and Access Management (IAM)Users, groups, roles, permissions, least privilege principle.AWS IAMTo control who can access cloud resources.Create IAM users and assign roles.Explain IAM and the principle of least privilege.Configure IAM users with appropriate permissions.
Cloud Storage SecurityData encryption, bucket permissions, access control, versioning.AWS S3To protect cloud storage from unauthorized access.Configure bucket permissions and enable versioning.Explain cloud storage security practices.Secure a cloud storage bucket correctly.
Cloud Backup & Disaster RecoveryBackup strategies, recovery plans, business continuity, redundancy.AWS BackupTo protect cloud data against loss.Create and test a backup plan.Explain disaster recovery concepts.Restore data from a cloud backup.
Cloud Monitoring & LoggingMonitoring resources, CloudWatch, activity logs, alerts.Amazon CloudWatchTo monitor cloud resources and detect issues.Create a CloudWatch alarm.Explain why cloud monitoring is important.Configure monitoring and alerts successfully.
Cloud Security Best PracticesMFA, encryption, updates, logging, access reviews, shared responsibility model.AWS Security HubTo assess and improve cloud security.Enable MFA on the cloud account and review security recommendations.Explain cloud security best practices.Apply cloud security recommendations successfully.
Cloud Security AuditCloud risk assessment, compliance checks, reporting, remediation.AWS Trusted AdvisorTo identify cloud security and performance improvements.Review Trusted Advisor recommendations and implement selected improvements.Explain the purpose of a cloud security audit.Perform a basic cloud security audit and document findings.

End-of-Month Project

Project Title

Secure a Small Business Cloud Environment

Objectives

  • Create cloud users.

  • Configure secure cloud storage.

  • Enable Multi-Factor Authentication (MFA).

  • Configure cloud backups.

  • Monitor cloud resources.

  • Produce a cloud security report.

Tools

  • AWS Free Tier

  • Microsoft Azure

  • Google Cloud Platform

  • AWS IAM

  • Amazon CloudWatch

  • Microsoft Word

Real-Life Projects

Project 1 – Secure Cloud Storage

Using your own cloud storage account (or a practice account):

  • Create folders.

  • Configure secure sharing permissions.

  • Enable MFA.

  • Remove unnecessary public access.

  • Document your security improvements.

Project 2 – Cloud Security Review

Review a small organization's cloud setup (or a fictional case study):

  • Check user permissions.

  • Review backup strategy.

  • Verify MFA usage.

  • Check storage permissions.

  • Produce a cloud security assessment report.

End-of-Month Assessment

Theory Assessment (30%)

  • 20 Multiple Choice Questions

  • 10 Short Answer Questions

  • Cloud security scenarios

  • IAM and cloud storage case studies

Practical Assessment (40%)

Students must:

  • Create an AWS Free Tier account.

  • Create an S3 bucket.

  • Upload and organize files securely.

  • Create IAM users and assign permissions.

  • Enable MFA.

  • Configure a CloudWatch alarm.

  • Review Trusted Advisor recommendations.

  • Produce a cloud security report.

Project Assessment (20%)

Students will be assessed on:

  • Secure cloud configuration

  • Correct IAM implementation

  • Backup and recovery configuration

  • Quality of cloud security documentation

  • Professional presentation

Class Participation (10%)

  • Attendance

  • Lab participation

  • Homework

  • Group discussions

  • Practical demonstrations

  • Cloud security presentation

Comments

Post a Comment

Popular posts from this blog

Nobigdeal Academy Cybersecurity Diploma Programme (12 Months)

Image
Cybersecurity Diploma Programme (12 Months) This programme is divided into four professional learning tracks. Each track lasts three months and builds on the knowledge and skills gained in the previous level. Students begin with the fundamentals of cybersecurity and gradually progress to advanced topics such as cloud security, security operations, digital forensics, and automation. Level 1: Cyber Defender (Foundation) Duration: 3 Months The Cyber Defender track is the foundation of the programme. It is designed for beginners who want to understand how computers, networks, and cybersecurity work. Students will learn how to recognize cyber threats, protect devices, and apply basic security measures to personal and business environments. During this level, students will study: Cybersecurity & Computer Fundamentals Networking Fundamentals Cyber Threats & Security Awareness Students will gain practical skills in: Computer security fundamentals Windows and Linux basics Networking ...
Read more

Month 8 – Security Operations Center (SOC) & Incident Response (Blue Team)

  Month 8 – Security Operations Center (SOC) & Incident Response (Blue Team) Note: This month focuses on defending systems , detecting suspicious activity, and responding to cybersecurity incidents. Topic What I Will Discuss Tool What We Use the Tool For Practical Theory Assessment Practical Assessment Introduction to SOC (Security Operations Center) What a SOC is, SOC roles, Tier 1–3 analysts, how a SOC operates. Microsoft Sentinel (Lab) To monitor and investigate security events from different systems. Explore the Microsoft Sentinel dashboard and identify security alerts. Define a SOC and explain its functions. Navigate the SIEM dashboard and identify security alerts. Security Monitoring Continuous monitoring, logs, alerts, detection methods. Splunk To monitor systems and identify suspicious activities. Import sample logs into Splunk and search for events. Explain why continuous monitoring is important. Search and identify suspicious events in logs. Log Analysis Types of log...
Read more

Month 11 – Programming & Automation for Cybersecurity

  Month 11 – Programming & Automation for Cybersecurity Note: This module teaches students how to use programming to automate security tasks, analyze data, and build simple cybersecurity tools. The emphasis is on defensive automation . Topic What I Will Discuss Tool What We Use the Tool For Practical Theory Assessment Practical Assessment Introduction to Programming for Cybersecurity Why cybersecurity professionals learn programming, programming languages, automation, scripting basics. Visual Studio Code To write, edit, and test scripts and programs. Install VS Code and write your first Python program. Explain why programming is important in cybersecurity. Write and run a Python program that prints a message. Python Basics Variables, data types, operators, input/output, comments. Python 3 To create automation scripts and security tools. Write programs using variables, calculations, and user input. Explain Python variables and data types. Develop a simple interactive Python pro...
Read more