A production cloud account: an attack path from the internet through an exposed virtual machine and an over-privileged role to a customer-data bucket is broken by two guardrails, and the blast radius of the role shrinks from 214 reachable resources to 6. Guardrails as code and a secure landing zone sit alongside.

CY-EXPERT-071Expert Level · Cloud Native Security

Cloud Security Architecture — Identity, Blast Radius, and the Attack Path

A twenty-four-hour expert course where you are a cloud security architect hardening a large multi-account estate along a live attack-path graph — treating identity as the perimeter, misconfiguration as the vulnerability, and blast radius as the risk, and designing a secure landing zone that makes teams secure by default.

24 hours9 chapters45 lessons250 activities9 labs

What you'll learn

Reason about cloud security in terms of identity, control plane, and blast radius.
Harden every node of the attack path — identity, control plane, network, data, workloads, supply chain.
Enforce security as code with guardrails and run continuous posture management and drift control.
Build cloud detection and response and design a secure landing zone that makes teams secure by default.

Price:৳12,000