AWS: Security foundations
Apply AWS through assets, threats, risk.
Intermediate / Structured learning draft / Version 0.9
Structured learning draftCloud Security - AWS & GCP
Apply practical protection to accounts and systems. You will finish with a prioritised security review and action plan.
This open learning manuscript is undergoing course-specific editorial review. It does not provide certification. Progress and notes are stored only in this browser.
CybersecurityTool stack
Google Cloud
12guided lessons
4focused modules
1reviewable project
PDFoffline workbook
The problem
What this course helps you do
Cloud Security - AWS & GCP is a structured, practical course covering AWS, GCP, IAM, Zero Trust. It emphasizes explainable methods, checked work and a final outcome that can be reviewed.
Who it is for
Defenders and developers learning lawful, defensive security practice.
Prerequisites
- Basic networking and operating-system knowledge
Portfolio-ready project
Produce a reviewable Cloud Security - AWS & GCP project using AWS, GCP, IAM.
Deliverable: A working Cloud Security - AWS & GCP artefact plus an evidence-based self-review.
Practice fileSecurity review sheetAn account and device control review with evidence fields.Planning template · MarkdownProject briefDefine the user, outcome, boundaries, evidence and acceptance criteria before building.Printable workbook · PDFComplete course workbookA4-ready lesson prompts, project worksheets, evidence logs and references.
Downloads open without an account. Practice data is fictional; review each file before using it in another system.
Definition of done
- The output matches the stated outcome.
- Inputs and decisions are reproducible.
- Boundary and failure evidence is included.
- Limitations and responsibility considerations are explicit.
Course plan
From first concept to finished work
GCP: Defensive controls
Apply GCP through identity, network protection, hardening.
IAM: Assessment
Apply IAM through safe testing, evidence, remediation.
Zero Trust: Operations
Apply Zero Trust through monitoring, response, recovery.
Source-led learning
Authoritative references
Course claims are grounded in primary documentation and recognized public guidance. Recheck version-sensitive information before professional use.
- Cybersecurity Framework 2.0NIST
- Web Security Testing GuideOWASP Foundation