Keeping every identity at Northstar on a short leash across AWS, Azure and GCP: the ci-deploy pipeline moves from a two-year-old static access key to OIDC federation with short-lived credentials, and a contractor's subscription-wide Contributor role shrinks to restarting one VM. Access climbs an eight-station rail — identities, authenticate, authorize, federate, least privilege, secrets, monitor and review — with guardrails above it: an Access Analyzer finding on a world-readable bucket closed and a service control policy that stops anyone disabling CloudTrail; and a review that revokes a leaver's access on the day instead of eight months later.

CY-MID-054Mid Level · Cloud IAM

Cloud IAM — The Cloud Access Rail

A hands-on mid-level course that gets cloud identity and access right across AWS, Azure, and GCP. Work the cloud access rail - eight stations: Identities, Authenticate, Authorize, Federate, Least Privilege, Secrets, Monitor, and Review - eliminating long-lived keys, right-sizing policies, and catching privilege drift. Strictly defensive. Four hands-on activities in every lesson.

15 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Model cloud identities and authenticate without long-lived keys.
Write least-privilege policies and federate access safely.
Manage cloud secrets and monitor for risky permissions.
Review access and remediate privilege drift continuously.

Price:৳8,000