Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

Cloud Security Risks: Identify and Protect Against Threats

Overview

This is the third of five courses in the Google Cloud Cybersecurity Certificate.

This is the third of five courses in the Google Cloud Cybersecurity Certificate. In this course, you’ll explore the principles of identity management and access control within a cloud environment, covering key elements like AAA (Authentication, Authorization, and Auditing), credential handling, and certificate management. You'll also explore essential topics in threat and vulnerability management, cloud-native principles, and data protection measures. Upon completing this course, you will have acquired the skills and knowledge necessary to secure cloud-based resources and safeguard sensitive organizational information. Additionally, you'll continue to engage with career resources and hone your interview techniques, preparing you for the next step in your professional journey.

Syllabus

Access control and identity management

In this module, you’ll delve into the crucial aspects of identity management and access control in cloud computing, learning about security principles such as least-privilege and separation-of-duties, and the crucial elements of AAA: authentication, authorization, and auditing. You'll explore various access control methods, credential management, and certificate handling, key to securing cloud applications.

Threat and vulnerability management

In this module, you'll immerse yourself in the world of threat and vulnerability management, learning to identify threats and vulnerabilities, assess risks, and implement effective mitigation strategies. You'll discover the ins and outs of asset management, including best practices and tools for efficient resource management, and delve into the crucial role of secure configuration in cloud security, with practical applications in the cloud environment.

Cloud Native Principles of Ephemerality and Immutability

In this module, you'll explore cloud-native principles of ephemerality and immutability, focusing on proper credential handling that aligns with these concepts. You'll discover the automation of infrastructure provisioning and its impact on security, including key areas such as containers, orchestration, and Infrastructure-as-Code (IaC).

Data Protection and Privacy

In this module, you'll gain a comprehensive understanding of data protection and privacy in the cloud. The module will guide you through the essentials of data loss prevention, data discovery, data processing, data treatment, and data classification, empowering you to understand and implement effective data governance and access strategies. Additionally, you'll explore the nuances of data retention levels and how compliance controls are applied, equipping you to explain and navigate governance in cloud security.