Training
Featured Course View All Courses
Get a Free Hour of SANS Training

Experience SANS training through course previews.

Learn More
Learning Paths
FeaturedView all Focus Areas
NEW - AI Security Training
Can't find what you are looking for?

Let us help.

Contact us
Free Resources

SANS Community Benefits

Connect, learn, and share with other cybersecurity professionals

Customer Case Studies

Discover how organizations and individual cyber practitioners use SANS training and GIAC certifications

AI Risk & Readiness

Explore expert-driven guidance, training, and tools to help defend against AI-powered threats and adopt AI securely

Join the SANS Community

Become a member for instant access to our free resources.

Sign Up
For Organizations

Public Sector

Mission-focused cybersecurity training for government, defense, and education

Partnerships

Explore industry-specific programming and customized training solutions

Sponsorship Opportunities

Sponsor a SANS event or research paper

Interested in developing a training plan to fit your organization’s needs?

We're here to help.

Contact Us
Group Purchasing
Group Purchasing

GIAC Public Cloud Security Certification (GPCS)

Cloud Security Certification Overview

GPCS validates the ability to evaluate, harden, and secure AWS, Azure, and Google Cloud environments against real-world attacks in multicloud deployments.

Explore SEC510 CourseRegister for the Exam
GPCS Badge
Jump to:

What Is the GPCS Certification?

The GIAC Public Cloud Security (GPCS) certification validates a practitioner's preparedness to secure the cloud in both public and multicloud environments. GPCS holders understand the nuances of AWS, Azure, and Google Cloud Platform, and are equipped to defend each of these platforms, since none of the three are secure by default.

By the numbers

2 hrs

Exam duration

75

Questions

64%

Min. passing score

What GPCS Covers

The certification's nine published objectives group into five practical domains, matching SEC510's five course sections.

Identity and Access Management

Covers Cloud Identity and Access Management, and the credential-based attack concepts inside Multicloud and Credential Management Fundamentals.

Network Access and Key Management

Covers Cloud Data Protection, Securely Accessing Cloud Services, and Virtual Network Security and Logging.

Cloud Storage Security

Covers Securing Cloud Storage Platforms.

Application and Serverless Platforms

Covers Securing Cloud Application Service Platforms and Securing Serverless Functions.

Multicloud Integration and Benchmarking

Covers Cloud Integration and Benchmarking.

Prepare With This Course

SEC510: Cloud Security Engineering and Controls

Course Details

How SEC510 Prepares You for GPCS

SEC510 is built around the exam objectives that make up the GPCS certification: 

  • Section 1, Cloud Engineering and Identity Access Management (IAM) builds skills tested under Cloud Identity and Access Management.
  • Section 2, Private Networks, Endpoints, and Encryption aligns with Cloud Data Protection and Securely Accessing Cloud Services.
  • Section 3, Cloud Data Security and AI Controls builds skills tested under Securing Cloud Storage Platforms.
  • Section 4, Serverless Workloads and End-User Security aligns with Securing Serverless Functions and Securing Cloud Application Service Platforms.
  • Section 5, Multicloud, CSPM, and Third-Party Integrations builds skills tested under Cloud Integration and Benchmarking.

Across all five sections, 52 hands-on labs give you the chance to apply each skill in live AWS, Azure, and Google Cloud environments before you sit the exam. 

Read the full GPCS certification overview 

SEC510 Course Authors

Brandon Evans

Brandon Evans

Partner at Cyverity

Brandon Evans is a SANS Senior Instructor and Partner at Cyverity. As the lead author of SEC510, he guides cloud and DevSecOps professionals in securing AWS, Azure and GCP workloads through hands-on training.

Learn more
Eric Johnson

Eric Johnson

Principal Security Engineer at Puma Security

Eric Johnson is a Fellow at the SANS Institute and Principal Security Engineer at Puma Security. He leads hands-on training in SEC540: Cloud Native Security and DevSecOps Automation, co-authors SEC549 and SEC510, and develops open-source tools to help practitioners secure cloud pipelines.

Learn more

Who Should Pursue GPCS

Security Engineers and Analysts

Cloud and DevOps Engineers

Security Auditors and System Administrators

Operations Personnel

Anyone Evaluating or Adopting Cloud Security Offerings

Frequently Asked Questions

The GIAC Public Cloud Security (GPCS) certification proves you can secure public cloud and multicloud environments across AWS, Azure, and Google Cloud Platform. GPCS holders understand the security strengths and weaknesses specific to each provider and know how to harden them, since none of the three are secure by default. 

The GPCS exam is a single proctored exam with 75 questions and a two-hour time limit. The minimum passing score is 64%, which applies to exam versions released on or after August 16, 2021. GIAC periodically reviews these specifications, so confirm the current format in your GIAC account before you sit for it. 

GIAC certifications are renewed on a recurring cycle through continuing education credits and a maintenance fee. For the current renewal requirements, see GIAC’s renewal page. 

GPCS is built for security analysts, engineers, and researchers; cloud and DevOps engineers; security auditors and system administrators; and operations personnel. It also fits anyone responsible for researching, evaluating, or adopting cloud security offerings, since the certification covers evaluation and comparison of the major public cloud providers alongside hardening and compliance work. 

SEC510: Cloud Security Engineering and Controls is the SANS course built to prepare you for the GPCS exam. It covers identity and access management, network and encryption controls, cloud data and AI security, serverless and application platforms, and multicloud CSPM integration through 52 hands-on labs across AWS, Azure, and Google Cloud. 

Ready to earn your GPCS certification?

Add the GPCS exam attempt when you register for SEC510.

Register for SEC510

Already trained? Register for the exam directly through GIAC here.