SEC510: Cloud Security Engineering and Controls
About This Course
SEC510 prepares professionals to navigate the complexity of safeguarding multicloud environments and serves as a foundational path for those pursuing the GPCS certification (GIAC Public Cloud Security), which validates skills in applying cloud security engineering best practices across AWS, Azure, and GCP.
Whether an application is developed in-house or by a third party, accepting the inevitability of application flaws is key for implementing successful cloud security controls. While few cybersecurity professionals can fix vulnerable code, it is often easier to engineer secure cloud solutions to mitigate these risks. Relying solely on CSP defaults and documentation is insufficient. SEC510 reveals numerous instances of incorrect, incomplete, or contradictory CSP controls. Additionally, if there is a zero-day vulnerability in a cloud service used by your organization, you must brace for that impact by controlling what you can.
What You'll Learn
- Make informed choices across AWS, Azure, and GCP with deep dives into PaaS and IaaS.
- Learn from real-world attack case studies.
- Test and validate security controls instead of relying on vendor documentation.
- Build layered IAM and integrate identity into network security.
- Automate encryption and compliance checks.
- Prevent, mitigate, and recover from ransomware.
- Secure FaaS, multicloud, IaC deployments, and GenAI workloads.
Entry Requirements
Participants should be proficient in written and spoken English. Please refer to our website for more details on the content taught:
https://www.sans.org/cyber-security-courses/cloud-security-engineering-controls
There are no minimum entry requirements for years of experience in the domain, education level or age group; but participants should possess the relevant prerequisite skills mentioned above.