This course has been certified by the CPD Certification Service as conforming to continuing professional development principles. Find out more.

Master the essentials of cloud security operations

Cloud security can feel overwhelming with so many platforms and configurations. Learn the practical, hands-on skills to secure cloud operations across AWS, Azure, and Google Cloud Platform.

Whether just starting out or building on existing knowledge, you’ll learn the fundamentals, practise real configurations, and gain confidence working with the tools and techniques that keep cloud environments safe and compliant.

Understanding cloud security foundations

Learn to differentiate between provider and customer responsibilities across IaaS, PaaS, and SaaS environments, and explore core infrastructure like virtual machines, containers, and serverless functions.

Cloud security starts with understanding who’s responsible for what from start to finish. Identify common threats like misconfigurations and data breaches unique to each model, building the foundation for all your security work.

Configuring identity and access controls that actually work

Configure roles, policies, and security groups on AWS, Azure, and Google Cloud through guided labs.

You’ll practise multi-factor authentication, just-in-time access, and monitoring privileged roles. Network controls like VPC firewalls add extra layers of defence, reducing your attack surface in real production environments.

Deploying detection and compliance tools

Catch threats before they escalate. You’ll deploy tools like AWS GuardDuty, Azure Defender, and Google Cloud Security Command Centre for automated alerts. Continuous monitoring.

You’ll map your configurations to frameworks like CIS Benchmarks, ISO 27001, and NIST, and integrate logging and SIEM tools for rapid incident response. You’ll leave ready to produce audit-ready reports that show your compliance posture.

Explore our ExpertTrack in Cyber Operations.

Syllabus

Week 1
Understand Cloud Service Models and Core Infrastructure
- Lesson 1: Introduction to Entire Course
  Guides learners through securing AWS, Azure, and GCP using native tools. Covers service models, VM hardening, threat detection, and compliance mapping to build an audit-ready cloud environment.
- Lesson 2: Understand Cloud Service Models (IaaS, PaaS, SaaS)
  Breaks down IaaS, PaaS, and SaaS using cross-cloud examples to show which technical layers are customer-managed and which are provider-managed across each model.
- Lesson 3: Classify Compute, Storage, and Networking Resources
  Identifies the roles of VMs, databases, object storage, subnets, and firewalls across AWS/Azure/GCP and shows how each resource fits into a secure cloud architecture.
- Lesson 4: Apply Shared Responsibility and Set Up IAM Basics
  Maps security tasks between provider and customer using the shared-responsibility model and then demonstrates the steps to create a restricted IAM user and enable MFA.
Week 2
Secure a Virtual Infrastructure Stack
- Lesson 5: Harden a Virtual Machine Before Use
  Selects a trusted OS image, enables automatic patching and logging, replaces passwords with SSH keys, and establishes a secure baseline configuration for a VM.
- Lesson 6: Control Network Access with Security Groups and Firewalls
  Defines inbound/outbound rules, constructs a “web-only” security group limited to ports 80/443, and verifies traffic restrictions using CLI and cloud analysis tools.
- Lesson 7: Protect Data in Databases and Storage Buckets
  Applies encryption at rest, blocks public access to storage buckets, and configures scheduled backups and snapshots for data durability and compliance.
Week 3
Enable Cloud-Native Detection and Response Tools
- Lesson 8: Detect Threats Using Built-In Security Tools
  Activates GuardDuty, Azure Defender, or Google SCC and examines sample findings such as port probes, reconnaissance attempts, and anomalous activity.
- Lesson 9: Investigate Cloud Activity with Logs
  Enables platform audit logs, filters for risky API calls such as delete/terminate actions, and exports log data for retention or external analysis.
- Lesson 10: Respond to Incidents with Minimal Tools
  Performs emergency key revocation, captures a VM snapshot for evidence, and completes a concise incident post-mortem using a structured five-question template.
Week 4
Align Cloud Controls with Compliance Frameworks
- Lesson 11: Map Security Controls to CIS, ISO 27001, and NIST CSF
  Compares major compliance frameworks and aligns practical cloud controls such as MFA, encryption, and logging with their corresponding CIS, ISO, and NIST requirements.
- Lesson 12: Automate Governance with Tags and Config Rules
  Implements ownership and cost-tracking tags, generates usage and compliance reports, and deploys an automated rule that flags or blocks public buckets.
- Lesson 13: Conduct a Final Security Review and Plan Next Steps
  Runs through a 10-control audit checklist, validates that the lab meets compliance expectations, and outlines available cloud-security certification paths.
- Lesson 14: Course Conclusion
  Reviews key skills from cloud models to compliance, reinforces the ten core controls applied, and outlines next steps for continued practice and cloud security certification paths.

Who is this accredited by?

The CPD Certification Service:

The CPD Certification Service was established in 1996 and is the leading independent CPD accreditation institution operating across industry sectors to complement the CPD policies of professional and academic bodies.

When would you like to start?

Start straight away and join a global classroom of learners. If the course hasn’t started yet you’ll see the future date listed below.

Available now
Join - $69

Learning on this course

On every step of the course you can meet other learners, share your ideas and join in with active discussions in the comments.

What will you achieve?

By the end of the course, you‘ll be able to...

Differentiate the security responsibilities of the cloud provider vs. the customer across IaaS, PaaS, and SaaS service models.
Configure identity- and network-based controls—such as IAM roles, security groups, and VPC firewalls—across AWS, Azure, and Google Cloud to enforce least-privilege access.
Deploy and operationalize cloud-native security services (e.g., AWS GuardDuty, Azure Defender, Google Cloud SCC) to detect threats and manage incident response workflows.
Map application and infrastructure workloads to compliance frameworks including CIS Benchmarks, ISO/IEC 27001, and the NIST Cybersecurity Framework, producing evidence artifacts for audits.

Who is the course for?

This course is ideal for cloud engineers, DevOps teams, IT security professionals, system administrators, and cloud architects building practical skills for cloud security roles or certifications.

Who will you learn with?

Paul Siegel

Who developed the course?

Starweaver

Starweaver is a next generation platform that engages your workforce as no other. Combining business and technical skills, Starweaver provides real-time skill building that is in line with your business objectives and strategies, and in your associates day to day tasks and jobs.

What's included?

This is a premium course. These courses are designed for professionals from specific industries looking to learn with a smaller group of like-minded individuals.

Unlimited access to this course
Includes any articles, videos, peer reviews and quizzes
Certificate of Achievement to prove your success when you're eligible
Download and print your Certificate of Achievement anytime

Join - $69

Still want to know more? Check out our FAQs

Learning on FutureLearn

Your learning, your rules

Courses are split into weeks, activities, and steps to help you keep track of your learning
Learn through a mix of bite-sized videos, long- and short-form articles, audio, and practical activities
Stay motivated by using the Progress page to keep track of your step completion and assessment scores

Join a global classroom

Experience the power of social learning, and get inspired by an international network of learners
Share ideas with your peers and course educators on every step of the course
Join the conversation by reading, @ing, liking, bookmarking, and replying to comments from others

Map your progress

As you work through the course, use notifications and the Progress page to guide your learning
Whenever you’re ready, mark each step as complete, you’re in control
Complete 90% of course steps and all of the assessments to earn your certificate

Want to know more about learning on FutureLearn? Using FutureLearn