FREE COURSE / SELF-PACED LEARNING

Cloud Security Foundations: Design, Operate, and Recover

Build your understanding of cloud security responsibilities, identities and control decisions with this free foundational course.

Read the first lesson Explore the curriculum

Read freely. Create an account to save your completed lessons.

Experience level
Intermediate
Curriculum
4 modules · 8 lessons
Estimated reading
32 min
Language
English

Reading estimates use lesson text and an allowance for diagrams. Reflection, exercises and optional linked resources take additional time. These are estimates, not measured completion times.

KNOW WHAT YOU’RE WORKING TOWARD

What you’ll learn

  • Explain shared responsibility and map the provider, customer, and application-owner controls for a cloud workload.
  • Design identity, account, network, and data boundaries that reduce blast radius without making operations unworkable.
  • Establish configuration, telemetry, and response practices that make cloud control effectiveness visible and repeatable.
  • Produce a risk-based cloud resilience and improvement plan with tested recovery outcomes and accountable owners.

Is this the right course for you?

Who it’s for

Learners moving from basic security concepts into cloud environments.

Scope and boundaries

Cloud security foundations. Provider-specific implementation requires checking the relevant platform documentation and permissions.

How you’ll learn

Self-paced reading with explanatory diagrams and linked resources. Reflection and optional resource study take additional time.

Before you begin

  • Basic cybersecurity and networking knowledge — Learners should understand accounts, networks, applications, access controls, logging, and common security threats.

About this course

This intermediate course gives security practitioners, cloud engineers, application owners, and technical managers a vendor-neutral way to reason about cloud security. Learners examine the real control decisions behind a secure cloud environment: where provider responsibility ends, how accounts and identities are separated, how configurations are made repeatable, how events become evidence, and how recovery works when a control fails.

The course does not teach a single provider console. It teaches durable patterns that apply across infrastructure, platform, and software services. By the end, learners can assess a cloud workload, identify the most important trust boundaries and failure modes, and build a proportionate security improvement plan.

FOLLOW THE LEARNING PATH

Course curriculum

MODULE 1

1. Cloud Responsibility and Boundaries

Establish the shared-responsibility and boundary models needed to reason about cloud risk before selecting tools or provider-specific settings.

  1. Shared Responsibility Is a Design DecisionUnderstand what cloud providers operate, what customers must configure, and why responsibility changes with the service model.4 min reading
  2. Accounts, Identities, Networks, and Data BoundariesUse deliberate boundaries to reduce the blast radius of an identity error, exposed workload, or unsafe integration.4 min reading

MODULE 2

2. Secure Configuration and Visibility

Make cloud controls repeatable through secure defaults and make their outcomes visible through useful telemetry, detection, and response design.

  1. Secure Configuration and Change ControlBuild repeatable secure defaults and manage cloud change as a reviewed, testable process rather than an accumulation of console settings.4 min reading
  2. Cloud Telemetry, Detection, and ResponseTurn cloud control-plane events, workload signals, and configuration changes into investigation-ready evidence and response decisions.4 min reading

MODULE 3

3. Resilience, Recovery, and Improvement

Design recovery as a tested security capability and use findings from exercises and incidents to prioritize durable cloud-security improvements.

  1. Cloud Resilience and Recoverable Security ControlsDesign backups, recovery access, and restoration tests that survive the same identity or configuration failure that affects the primary workload.4 min reading
  2. Build a Risk-Based Cloud Security RoadmapConvert a cloud-workload assessment into sequenced improvements with explicit outcomes, owners, dependencies, evidence, and review dates.4 min reading

Sources and editorial review

Reviewed by Threat Intelligence Lab

Sources linked in the lessons provide context and further reading. Check the original documentation for current platform behavior and requirements.

Selected references are shown here; the lessons contain the full reading lists.

About this learning content: Courses, lessons, assessments, explanations and illustrations may be created with the help of artificial intelligence. We review and check the material and do our best to avoid incorrect or outdated information, but mistakes, omissions or ambiguous questions may remain. Please verify information before relying on it for professional, security, legal or operational decisions. Read the full notice or report an issue.