Cloud Security Risks: Identify and Protect Against Threats

Overview

This is the third of five courses in the Google Cloud Cybersecurity Certificate. In this course, you’ll explore the principles of identity management and access control within a cloud environment, covering key elements like AAA (Authentication, Authorization, and Auditing), credential handling, and certificate management. You'll also explore essential topics in threat and vulnerability management, cloud-native principles, and data protection measures. Upon completing this course, you will have acquired the skills and knowledge necessary to secure cloud-based resources and safeguard sensitive organizational information. Additionally, you'll continue to engage with career resources and hone your interview techniques, preparing you for the next step in your professional journey.

Syllabus

Access control and identity management

Introduction to Course 3
Course 3 overview
Manny: A day in the life of a red team security engineer
Helpful resources and tips
Lab technical tips
Explore your course 3 scenario: Cymbal Bank
Welcome to module 1
Core principles of identity management
Uses for identity management measures
Authentication, authorization and auditing (AAA)
Credential handling and service accounts
Create a role in Google Cloud IAM
Test your knowledge: Access management
Access controls in the cloud
Cloud access control in action
Test your knowledge: Types of access controls
Perimeter protection
Trust boundaries
Guide to firewall rules
Access a firewall and create a rule
Common attack vectors
Test your knowledge: Perimeter protection
Zero trust
Zero trust policies and complementary controls
Test your knowledge: Zero trust
Wrap-up
Glossary terms from module 1
Module 1 challenge

Threat and vulnerability management

Welcome to module 2
Introduction to threat management
Threat and vulnerability management assessments
Eyre: Secure cloud assets
Test your knowledge: Importance of threat and vulnerability management
Asset and resource management
Steps for asset management
On-the-job asset management applications
Test your knowledge: Asset management
Vulnerability remediation and posture management
Vulnerability remediation and posture management in software development
Posture management tools and techniques
IT automation tools for posture management
IT automation tools for security configuration management
Guide to web application security scanning
Identify vulnerabilities and remediation techniques
Test your knowledge: Vulnerability remediation and posture management
Patching and rehydration
Compare and contrast: Patching and rehydration
Rehydration keeps systems up-to-date
Test your knowledge: Patching and rehydration for system maintenance
Trends in vulnerability and threat management
Trends in security: Artificial Intelligence (AI), machine learning (ML), and Internet of things (IoT)
Reports and assessments for threat and vulnerability management
Test your knowledge: Trends in threat management
Wrap-up
Glossary terms from module 2
Module 2 challenge