security-cloud
Cloud & Infra Security
Securing modern infrastructure: the cloud shared-responsibility model, IAM, container and Kubernetes security, infrastructure-as-code, and cloud posture management.
Start track →Start here
How the cloud changes the threat model and where the shared-responsibility line sits.Cloud IAM
Identity is the cloud perimeter: the identity model, least-privilege policies, role assumption, and IAM misconfig.Container and Kubernetes security
Secure the container lifecycle and the orchestrator: images, runtime, RBAC, network policy, and secrets.IaC and supply-chain security
Shift cloud security left: scan IaC and images, prove provenance with SLSA/SBOM, and harden the pipeline.Cloud detection and posture
See and fix cloud risk continuously: CSPM, cloud logs/trails, misconfiguration detection, and data security.Build with this track
Guided projects that exercise what you learn here.
Cloud Hardening Lab
Take a cloud account you own and drag it from 'it works' to 'it's defensible'. You'll measure the posture you actually have, tighten IAM to least privilege without breaking the app, lock down the network and secrets, and prove every change with a before/after diff. This is the core of cloud security work: not adding features, but removing the standing access and quiet misconfigurations that an attacker would have used.
Three-Tier App on AWS, by IaC
Stand up a real three-tier system on AWS — a load balancer in front, a compute tier in the middle, a managed Postgres behind it, and S3 for objects — entirely from code you can re-run. The point isn't to click through a console once; it's to express the whole topology, its IAM, and its network boundaries as Terraform (or CDK) you could hand to a teammate, destroy, and recreate byte-for-byte. This is the project where 'infrastructure' stops being a pile of consoles and becomes a reviewable artifact.
Command line
Start knowing only how to click. Finish able to navigate, search, and automate your system from a bare terminal prompt.