This cloud security training shows you how to protect cloud environments through identities, network boundaries, encryption and monitoring, and how to respond to incidents. It is aimed at cloud administrators, DevOps engineers and security leads with hands-on experience in AWS, Azure or Google Cloud. You work with the shared responsibility model, design least-privilege permissions, evaluate logs and rehearse how a security incident unfolds.
What you’ll take away.
- Apply the shared responsibility model to concrete cloud services
- Design identities and permissions following least privilege
- Plan network segmentation, encryption and key management
- Collect and evaluate audit logs and security findings centrally
- Contain, investigate and document an incident in the cloud
Your training in detail
- Who is it for?
- Cloud administrators, DevOps engineers, architects and security leads with cloud experience.
- Prerequisites
- Hands-on experience with at least one cloud platform plus basics in networking and identity management.
- Format & planning
- Suggested format: 3 days live online or on site. Scope depends on prior knowledge.
Agenda: from understanding to application
Our independently developed agenda proposal. Focus areas, lab environment and scope are agreed before booking.
Fundamentals: shared responsibility, threat modelling with STRIDE and security principles from the Well-Architected Framework.
Identities: IAM roles and policies, Microsoft Entra ID, multi-factor authentication, federation and secrets management.
Network and data: VPC and VNet, security groups, private endpoints, encryption at rest and key management with KMS or Key Vault.
Configuration: cloud security posture management, policy as code, scanning Terraform and container images.
Monitoring: CloudTrail, Azure Monitor and Activity Log, Microsoft Defender for Cloud, GuardDuty and central log analysis.
Incident response: containment, preserving evidence, rotating credentials, lessons learned and coordination with reporting duties.
Suggested exercise: in a test account, find an over-privileged service account, reduce its rights based on audit logs and investigate a simulated access to an open storage bucket.
Exams, licences & credentials
Cloud providers have their own security certifications, and the exam list changes. For example, Microsoft retired the Azure Security Engineer Associate certification on 31 August 2026. Check the current status with the provider. Fees are only included if confirmed in the offer. Attending alone awards no vendor certification.
Vendor references & review date
Sources checked on 2026-11-03. These sources describe the technology or external exam requirements. They do not imply a partnership with NextNowa.
Your learning content
These objectives describe the training topic. The specific syllabus, duration, dates, trainer and price are agreed before booking.
Frequently asked questions
Who is responsible for security in the cloud?
Both sides share the job. The provider secures the infrastructure, while you configure identities, data, networks and applications. Where the line falls depends on the service, differently for IaaS than for SaaS. The training clarifies this for the services you actually use.
Which cloud misconfigurations are the most common?
Typical issues are overly broad permissions, publicly reachable storage, missing multi-factor authentication and unprotected access keys in code. We show how to catch such findings early with posture management and policy as code, rather than after an incident. We do not quote specific frequencies.
Does the training apply to one specific cloud?
The concepts apply to all major providers, and we choose examples to match your environment, whether AWS, Azure or Google Cloud. Terms differ: roles are called IAM roles in one place and role assignments in another. Tell us in your enquiry which platform you use.
Does Cloud security include a certificate?
Cloud providers have their own security certifications, and the exam list changes. For example, Microsoft retired the Azure Security Engineer Associate certification on 31 August 2026. Check the current status with the provider. Fees are only included if confirmed in the offer. Attending alone awards no vendor certification.