Cloud Security and Audit Fundamentals: AWS, Microsoft Azure, and Google Cloud

Introduction

• Why is cloud security important?
• An approach for securing the cloud

1. Introduction to the Cloud

• Cloud concepts
• Introduction to the AWS Management Console: Management plane
• Introduction to the Azure Portal: Management plane
• Introduction to the Google Cloud Console: Management plane

2. Security in the Cloud

• Risks and impact on security as organizations move to the cloud
• General controls to implement to mitigate risk in the cloud
• Encryption and management of keys in the cloud

3. Identity and Access Management

• Identity and access management in AWS
• Identity and access management in Azure
• Identity and access management in GCP

4. Security in Cloud Virtual Machines

• Security basics in AWS Elastic Compute Cloud (EC2)
• Security basics in Azure Virtual Machines
• Security basics in Google Compute Engine

5. Virtual Networks

• Security basics in virtual networks
• Security basics in Amazon Virtual Private Cloud (VPC)
• Security basics in Azure Virtual Network (VNet)
• Security basics in Google Cloud VPC

6. Security in Cloud Storage

• Security basics in Amazon Simple Storage Service (S3)
• Security basics in Azure Storage
• Security basics in Google Cloud Storage

7. Native Cloud Security Posture Management (CSPM) Tools

• Assessing AWS using AWS Security Hub
• Assessing Microsoft Azure using Microsoft Defender for Cloud
• Assessing Google Cloud using Google Security Command Center

Conclusion

• Next steps