Cloud environments move fast, and so do configuration mistakes. This cloud penetration testing training teaches you how cloud environments are attacked and assessed, with a focus on identity, storage, networking and the misconfigurations that lead to real incidents.
Who should attend
- Penetration testers moving into cloud assessments
- Cloud and platform engineers
- DevOps and DevSecOps engineers
- Security architects and cloud security teams
Prerequisites
Participants should understand basic networking and be comfortable with the command line. Familiarity with at least one cloud provider’s console is helpful; penetration testing experience is recommended but not required for cloud engineers.
What you will learn
- Cloud security fundamentals and the shared responsibility model
- Identity and access management weaknesses and privilege escalation paths
- Storage, database and snapshot exposure
- Compute, serverless and metadata service risks
- Network design and segmentation in the cloud
- Secrets and key management mistakes
- Logging, monitoring and detection gaps
- Assessing multi-account environments
- Using provider benchmarks, such as the CIS Foundations Benchmarks, as a baseline
- Reporting cloud findings and recommending remediation
Hands-on labs
Participants work in prepared AWS, Azure and Google Cloud lab environments that contain realistic misconfigurations, then chain them into privilege escalation paths and recommend fixes.
What you receive
- Course materials and lab access
- A cloud assessment checklist
- A certificate of attendance
Frequently asked questions
Learn to secure and test the cloud
Contact us for dates, pricing and corporate options.
Need 24/7 Protection From Cyber Attacks?