Free lesson 1 of 10 from Cloud Security — Attack and defend AWS, Azure & GCP. No account, no card.
Cloud platforms deliver computing over the internet through three main service models. IaaS (Infrastructure as a Service) gives you virtual machines, networks, and storage. PaaS (Platform as a Service) provides managed runtimes and databases. SaaS (Software as a Service) delivers finished applications. Each model shifts more operational responsibility to the provider.
The shared-responsibility model defines who secures what. The provider secures the underlying hardware, hypervisor, and physical facilities ("security of the cloud"). You, the customer, secure your data, identities, configurations, and access policies ("security in the cloud"). Most real-world breaches happen on the customer side through misconfiguration, not provider failure.
The major providers are AWS, Azure, and GCP. Their command-line tools are aws, az, and gcloud. Learning to read and reason about resources through these CLIs is the backbone of cloud assessment work.
Set up a safe practice environment using a provider's free tier. Create a dedicated personal account, enable billing alerts, and treat it as disposable. Never point tooling at production or at accounts you do not own.
aws sts get-caller-identity, az account show, or gcloud auth list), and set a billing alert at a low threshold.⚖️ For authorized, legal testing only.
10 lessons · knowledge checks · final exam · verifiable certificate · in-browser Live-Lab
Unlock all courses · CHF 9/month Buy only this course · CHF 19