homepage
Menu
Open menu

The most trusted source of cloud security training, certification, and research.

Cloud Security - Securing Thin Air
Courses & Certifications Resources & Tools
News & UpdatesCoursesCertificationsInstructorsReviewsFree ResourcesAbout

Latest Cloud Security News & Updates

Webcast: Cloud Native Part 3
Cloud Native Security Part 3: Continuous Compliance with Prowler
Join SANS Author and instructor, Eric Johnson for a session on automating continuous compliance across cloud environments using the open-source tool Prowler. Learn how to scan AWS, Microsoft 365, Azure, GCP, and Kubernetes for misconfigurations and compliance issues, then integrate findings into GitLab CI pipelines and Defect Dojo for streamlined triage and reporting. Parts 1 and 2 are now available OnDemand
Register Now!
NEW GCAD Certifcation NEW GCAD Certifcation
Certification
NEW! Introducing GIAC Cloud Security Architecture and Design (GCAD)
GIAC’s GCAD certification is officially available for purchase! Validate your cloud security architecture and design expertise – Register now!
Register Now!

Level up Your Cloud Security Skills in Denver!

Join CloudSecNext Summit & Training 2025 in Denver, CO (October 2-9) for elite, hands-on cloud security training led by world-renowned instructors. Gain cutting-edge skills through interactive labs, real-world simulations, and expert-led sessions. Don’t miss this event—secure your spot today!
Act Now!

Featured Cloud Security Courses & Certifications

Major Update
SEC488: Cloud Security Essentials™
Certification:

  • GCLD
Major Update
SEC510: Cloud Security Controls and Mitigations™
Certification:

  • GPCS
Major Update
SEC541: Cloud Security Threat Detection™
Certification:

  • GCTD
Major Update
SEC549: Cloud Security Architecture™
Certification:

  • GCAD
    See All Cloud Security Courses & Certifications

    Top 3 Differentiators

    Frank Kim, SANS Fellow, Curriculum Lead for both Cloud Security and Cybersecurity Leadership shares the top three benefits of taking cloud security training with SANS.

    Training Flight Paths into Cloud Security

    Upskill. Reskill. Keep up with the speed of cloud.
    Explore Journeys
    Landing_Page_Cert.jpg

    Cloud Security Certifications

    Securing the cloud is now essential across our global infrastructure. GIAC's cloud security certifications are designed to help you master the practical steps necessary for defending systems and applications in the cloud against the most dangerous threats. From web application security and DevOps automation to cloud-specific penetration testing - across public cloud, multi-cloud, and hybrid-cloud scenarios - we've got the credentials both professionals and organizations need to ensure cloud security at any enterprise.

    Learn More

    To be a Cloud Ace, You Must Learn From One

    The exceptionally qualified people who author and teach SANS courses, and contribute to the GIAC Certification exams aligned with those courses, are the leaders in the field. Meet some of our instructors.
    Frank Kim is a SANS Fellow in the Cyberseurity Leadership and Cloud Security curricula.

    Frank Kim

    Fellow
    Frank Kim is the Founder of ThinkSec, a security consulting and CISO advisory firm. He leads the Cybersecurity Leadership and Cloud Security curricula at SANS, as well as authors and instructs multiple SANS courses.
    Learn Why
    View All Instructors Become an Instructor
    SANS.EDU_Social_Cards_470x382_CloudSec.jpg

    Graduate Certificate Program in Cloud Security

    Prepare to navigate your organization through the security challenges and opportunities of cloud services.
    • Designed for working InfoSec professionals
    • Highly technical 12-credit-hour program
    • Includes 4 industry-recognized GIAC certifications
    Learn More

    Reviews

    I likely will be assessing environments that use multiple CSPs and services for one system, so this training is better for me than being certified in only AWS or only Azure.
    Margaret Ray
    - Federal Reserve Board of Dallas
    Labs were detailed and thought-provoking. Gave great thought to existing implementation and real-world examples.
    Collin Huber
    - Allstate Insurance
    I learned so much in 5 days – wish I had this a year ago when we first started getting into the Cloud!
    Thomas Buergi
    - Pacific Life Insurance Co.
    The labs are the most life like simulation of a security architect's day that I have seen. For people aspiring to become architects, it gives them a great example of what day to day architecture can be like.
    Maciej Bak
    - Standard Chartered

      More Free Cloud Resources

      About Cloud Security Training

      SANS Cloud Security training focuses the deep resources of SANS on the growing threats to The Cloud by providing training, GIAC certification, research, and community initiatives to help security professionals build, deploy and manage secure cloud infrastructure, platforms, and applications.

      Our curriculum provides intensive, immersion training designed to help you and your staff master the practical steps necessary for defending systems and applications in the cloud against the most dangerous threats. Our cloud security courses are full of important and immediately useful techniques that you can put to work as soon as you return to your office. The curriculum has been developed through a consensus process involving industry leading engineers, architects, administrators, developers, security managers, and information security professionals, and address public cloud, multi cloud, and cloud agnostic scenarios for the enterprise and developing organizations alike.

      GIAC's cloud security certifications are designed to help you master the practical steps necessary for defending systems and applications in the cloud against the most dangerous threats. From web application security and DevOps automation to cloud-specific penetration testing - across public cloud, multi-cloud, and hybrid-cloud scenarios - we've got the credentials both professionals and organizations need to ensure cloud security at any enterprise.