Cloud Security Fundamentals

What this cybersecurity course is

Cloud Security Fundamentals is a 6-module cybersecurity course for security engineers, IT generalists, and DevOps practitioners targeting a cloud security engineer or cloud security architect role across AWS, Azure, and Google Cloud. Every module is grounded in NIST Special Publications and the official Well-Architected security pillars rather than vendor marketing. Topics include the shared responsibility model from NIST SP 800-145 (Mell & Grance 2011), IAM design for cloud-scale blast radii using NIST SP 800-210 (Chandramouli & Iorga 2020), microservices and service-mesh security per NIST SP 800-204 (Chandramouli 2019) and 800-204B (2022), container hardening per NIST SP 800-190 (Souppaya, Morello & Scarfone 2017), and zero-trust architecture per NIST SP 800-207 (Rose et al. 2020). The course is for adults committing 8 to 10 weeks of focused study before sitting CCSP, AWS Security Specialty, or Microsoft SC-100. Designed by Julian Calvo, Ed.D. in Applied Learning Sciences (University of Miami, 2026).

The course sequences six modules around the cloud-security operational stack as defined in the NIST cloud-computing reference architecture (Liu et al. 2011, NIST SP 500-292). Each module pairs a primary-source standard with a hands-on prompt: read the standard, apply it to a real cloud configuration, document the security review the way an audit team would expect to see it. The pedagogical structure follows Kolb's experiential learning cycle (1984) and the Dreyfus skill acquisition model (1980): concrete cloud configurations, structured reflection against the standard, abstract conceptualization through the controls catalog, then active experimentation in a free-tier sandbox. Every claim is cited to NIST, CSA, the cloud provider's official documentation, BLS, ISC2, or peer-reviewed research. No vendor white papers without primary-source backing.

Six modules

1. Module 01 · 130 minThe Cloud Security Stack: Shared Responsibility and the Reference Architecture+

   What the shared-responsibility model actually says, where the seams sit between the cloud provider and the customer, and how the NIST reference architecture organizes the controls catalog you will spend the rest of the course inside.

   Learning objectives

   • Cite the NIST SP 800-145 (Mell & Grance 2011) cloud-deployment models and service models, and explain why they still anchor every cloud-security framework written since
   • Map the shared-responsibility seam for IaaS, PaaS, and SaaS workloads against the NIST SP 500-292 reference architecture
   • Explain why the customer is responsible for IAM and data security in every cloud service model and what that implies for an auditor's first questions
2. Module 02 · 150 minCloud IAM and the Blast Radius+
3. Module 03 · 130 minCloud Network Segmentation and Zero Trust+
4. Module 04 · 140 minContainer and Kubernetes Security+
5. Module 05 · 130 minCloud Detection and Response+
6. Module 06 · 100 minThe Cloud Security Career Trajectory+

Target audience

• Security engineers stepping sideways into cloud-focused security roles
• DevOps practitioners taking on the security side of the SRE or platform-engineering job
• On-prem network security engineers pivoting to cloud network security
• Cybersecurity professionals preparing for CCSP, AWS Security Specialty, or Microsoft SC-100
• Cloud architects whose scope now includes the security review of new platform decisions

Prerequisites

• Working familiarity with at least one cloud provider console (AWS, Azure, or Google Cloud)
• Basic understanding of TCP/IP networking, DNS, TLS, and HTTP
• Comfort with the command line on Linux, including SSH, curl, and basic shell scripting
• Willingness to commit 8 to 10 weeks of 4 to 6 hours per week study
• Free-tier account on at least one cloud provider for hands-on lab work

Related cybersecurity content

• Cloud Security Engineer salary data
• Cloud Security Engineer cybersecurity career guide
• Cloud Security Architect cybersecurity career guide
• ISC2 CCSP certification guide
• AWS Security Specialty certification guide
• SOC Analyst Fundamentals (the cybersecurity detection-and-response companion course)

Disclaimer

This course is for educational purposes only. It does not guarantee employment, certification pass rates, or salary outcomes. Cloud-platform pricing, services, and feature availability change rapidly; always verify current configuration against the cloud provider's authoritative documentation before applying course content to production systems. NIST and CSA materials cited here are public works; readers should consult primary sources for currency. AWS, Microsoft Azure, and Google Cloud are trademarks of their respective owners; DecipherU is not affiliated with any cloud provider. CCSP and AWS Security Specialty are trademarks of ISC2 and Amazon respectively. DecipherU is not responsible for career, financial, or operational decisions made based on this content.