AWS, Azure and GCP security from fundamentals to attacks. IAM Privilege Escalation with Pacu, Cloud Misconfigurations, Container and Kubernetes Security, IaC auditing with Checkov and tfsec. Requires FC-03 and FC-04.
Why Cloud Security is the hottest specialization
Numbers that explain everything
After the course you will be able to
Hands-on practice in real AWS environments with actual vulnerabilities, not theory
Real breaches in the course
We analyze major Cloud incidents and reproduce their techniques in lab environments
Capital One 2019 — 106M customers via SSRF + IAM
A former Amazon employee exploited an SSRF vulnerability in a WAF to access the EC2 Instance Metadata Service and stole IAM role credentials. Then downloaded data of 106 million customers from S3. Fine — $80 million.
Toyota 2023 — 296K customers, S3 open for 8 years
Toyota discovered that a cloud environment with data of 296,000 customers had been publicly accessible from 2015 to 2023 — 8 years unnoticed. Cause: missing S3 Block Public Access and monitoring.
Microsoft Power Apps 2021 — 38 TB of internal data
A misconfiguration in Power Apps table settings exposed public access to 38 TB of sensitive data: employee contacts, email addresses, contract data. 47 organizations affected, including Ford and American Airlines.
Course Program
9 modules · 45 lessons · 3 themes: Cloud Security Fundamentals, Cloud Attacks, Defense & Monitoring
Where this course leads
FC-08 — entry into the fastest-growing cybersecurity niche with $120K+ salaries
Cloud Security Architect
Design secure cloud infrastructure for enterprise clients. The highest-paying role in Cloud Security.
Cloud Penetration Tester
Conduct pentests of client cloud infrastructure. Huge demand, acute shortage of specialists with real experience.
DevSecOps Engineer
Embed security into CI/CD pipelines. Work at the intersection of development, DevOps and cybersecurity.
Who this course is for
Pentesters and Red Team
Completed FC-03 and FC-04, want to master the cloud attack vector — the most relevant vector with 99% of incidents on the client side. Real arsenal: Pacu, ScoutSuite, Kube-Hunter
DevOps and Cloud engineers
Work with AWS, Azure or GCP and want to understand how your infrastructure looks through an attacker's eyes. Learn to read CloudTrail, configure GuardDuty and perform IaC audits
Architects and developers
Build cloud systems and want to embed security from day one: IAM Least Privilege, Terraform security, Policy as Code and monitoring through Security Hub
Become a
Cloud Security
expert with real experience
45 lessons on AWS, Azure and GCP: from Shared Responsibility Model to Cloud Forensics. Pacu, Checkov, Kube-Hunter and real vulnerable cloud environments.