Cloud Security Risks: Identify and Protect Against Threats

This course is part of Google Cloud Cybersecurity Professional Certificate

Instructor: Google Cloud Training

Access provided by Universitas Indonesia

5,362 already enrolled

4 modules

Gain insight into a topic and learn the fundamentals.

46 reviews

Beginner level

No prior experience required

Flexible schedule

3 weeks at 10 hours a week

Learn at your own pace

90%

Most learners liked this course

4 modules

Gain insight into a topic and learn the fundamentals.

46 reviews

Beginner level

No prior experience required

Flexible schedule

3 weeks at 10 hours a week

Learn at your own pace

90%

Most learners liked this course

What you'll learn

Describe fundamental identity and access management concepts specific to the cloud.
Identify key components of AAA (Authentication, Authorization, Auditing) for strengthened cloud security.
Explain capabilities and best practices for efficient asset and resource management in the cloud.
Explore common security vulnerabilities and evaluate their impact and risk mitigation strategies.

Skills you'll gain

Tools you'll learn

Role-Based Access Control (RBAC)

Details to know

Shareable certificate

Add to your LinkedIn profile

Assessments

22 assignments

Taught in English

See how employees at top companies are mastering in-demand skills

Learn more about Coursera for Business

logos of Petrobras, TATA, Danone, Capgemini, P&G and L'Oreal

Build your Software Development expertise

This course is part of the Google Cloud Cybersecurity Professional Certificate

When you enroll in this course, you'll also be enrolled in this Professional Certificate.

Learn new concepts from industry experts
Gain a foundational understanding of a subject or tool
Develop job-relevant skills with hands-on projects
Earn a shareable career certificate from Google Cloud

There are 4 modules in this course

Two courses down, three to go – you’re well on your way! This is the third course of the Google Cloud Cybersecurity Certificate. You’ll delve into the key aspects of identity management and access control in cloud computing, including security principles like least-privilege and separation-of-duties, and the crucial elements of AAA: authentication, authorization, and auditing. AAAnd…let’s go to it! ← See what we did there?!

In this module, you’ll deep dive into the crucial aspects of identity management and access control in cloud computing, covering security principles like least-privilege and separation-of-duties, and the crucial elements of AAA: authentication, authorization, and auditing. You'll explore various access control methods, credential management, and certificate handling, key to securing cloud applications.

What's included

11 videos10 readings5 assignments2 app items1 plugin

11 videos Total 45 minutes

Introduction to Course 3 5 minutes
Manny: A day in the life of a red team security engineer 2 minutes
Welcome to module 1 1 minute
Core principles of identity management 4 minutes
Authentication, authorization and auditing (AAA) 5 minutes
Credential handling and service accounts 5 minutes
Access controls in the cloud 5 minutes
Perimeter protection 6 minutes
Common attack vectors 3 minutes
Zero trust 7 minutes
Wrap-up 2 minutes

10 readings Total 130 minutes

Course 3 overview 10 minutes
Helpful resources and tips 10 minutes
Lab technical tips 10 minutes
Explore your course 3 scenario: Cymbal Bank 10 minutes
Uses for identity management measures 10 minutes
Cloud access control in action 20 minutes
Trust boundaries 20 minutes
Guide to firewall rules 20 minutes
Zero trust policies and complementary controls 10 minutes
Glossary terms from module 1 10 minutes

5 assignments Total 84 minutes

Module 1 challenge 50 minutes
Test your knowledge: Access management 10 minutes
Test your knowledge: Types of access controls 8 minutes
Test your knowledge: Perimeter protection 8 minutes
Test your knowledge: Zero trust 8 minutes

2 app items Total 180 minutes

Create a role in Google Cloud IAM 90 minutes
Access a firewall and create a rule 90 minutes

1 plugin Total 15 minutes

Accessing and completing labs 15 minutes

Get ready for another action-packed adventure! In this module, you'll transform into a threat-hunting detective. Uncover hidden vulnerabilities, pinpoint risks with precision, and deploy cunning mitigation strategies. You'll unlock the secrets of asset management, discovering tools and techniques for safeguarding your resources like a seasoned pro. And get ready to crack the code on secure configuration, building an impenetrable fortress within the cloud.

What's included

13 videos8 readings6 assignments1 app item

13 videos Total 61 minutes

Welcome to module 2 2 minutes
Introduction to threat management 5 minutes
Eyre: Secure cloud assets 2 minutes
Asset and resource management 6 minutes
Steps for asset management 7 minutes
Vulnerability remediation and posture management 4 minutes
Vulnerability remediation and posture management in software development 5 minutes
IT automation tools for posture management 6 minutes
Patching and rehydration 6 minutes
Compare and contrast: Patching and rehydration 5 minutes
Trends in vulnerability and threat management 7 minutes
Reports and assessments for threat and vulnerability management 5 minutes
Wrap-up 2 minutes

8 readings Total 150 minutes

Threat and vulnerability management assessments 20 minutes
On-the-job asset management applications 20 minutes
Posture management tools and techniques 20 minutes
IT automation tools for security configuration management 20 minutes
Guide to web application security scanning 20 minutes
Rehydration keeps systems up-to-date 20 minutes
Trends in security: Artificial Intelligence (AI), machine learning (ML), and Internet of things (IoT) 20 minutes
Glossary terms from module 2 10 minutes

6 assignments Total 96 minutes

Module 2 challenge 50 minutes
Test your knowledge: Importance of threat and vulnerability management 8 minutes
Test your knowledge: Asset management 8 minutes
Test your knowledge: Vulnerability remediation and posture management 10 minutes
Test your knowledge: Patching and rehydration for system maintenance 10 minutes
Test your knowledge: Trends in threat management 10 minutes

1 app item Total 90 minutes

Identify vulnerabilities and remediation techniques 90 minutes

Ready to do some exploring? In this module, you'll discover cloud-native principles of ephemerality and immutability, focusing on proper credential handling that aligns with these concepts. You'll discover the automation of infrastructure provisioning and its impact on security, including key areas like containers, orchestration, and Infrastructure-as-Code (IaC).

What's included

14 videos13 readings6 assignments1 app item

14 videos Total 47 minutes

Welcome to module 3 1 minute
Cloud-native design and architecture principles 4 minutes
Cloud-native architecture for security 3 minutes
Introduction to ephemerality and immutability 4 minutes
Automation in cloud security 3 minutes
Infrastructure as code, policy as code, and DevSecOps 4 minutes
Benefits of policy as code 3 minutes
Terraform for IaC management 4 minutes
Containers vs. virtual machines 3 minutes
Container benefits and considerations 4 minutes
Techniques to secure containers 4 minutes
Container drift 4 minutes
Container orchestration 4 minutes
Wrap-up 1 minute

13 readings Total 245 minutes

TTL policies and expiration 5 minutes
Automation to improve cloud security efficiency 20 minutes
AI and automation in security 20 minutes
Infrastructure as code and cloud-native security 20 minutes
Terraform and cloud security 20 minutes
Guide to automating deployment with Terraform 20 minutes
A brief guide to containers 20 minutes
Containers’ importance in the cloud 20 minutes
Security in containers 20 minutes
Serverless functions and security 20 minutes
Activity: Analyze the security of a container 30 minutes
Activity Exemplar: Analyze the security of a container 20 minutes
Glossary terms from module 3 10 minutes

6 assignments Total 92 minutes

Module 3 challenge 50 minutes
Test your knowledge: Ephemerality and immutability 8 minutes
Test your knowledge: Automation in cloud infrastructure 8 minutes
Test your knowledge: Containers explained 8 minutes
Activity Quiz: Analyze the security of a container 8 minutes
Test your knowledge: Orchestrators and security of containers 10 minutes

1 app item Total 90 minutes

Change firewall rules using Terraform and Cloud Shell 90 minutes

In this module, you'll gain a comprehensive understanding of data protection and privacy in the cloud. We’ll guide you through the essentials of data loss prevention, data discovery, data processing, data treatment, and data classification, empowering you to understand and implement effective data governance and access strategies. You'll also explore the nuances of data retention levels and how compliance controls are applied, so you can explain and navigate governance in cloud security.