SEC549: Cloud Security Architecture - Live Online
Cloud design mistakes are cheap to make and expensive to unwind. Identity sprawl, a flat network that was going to be segmented later, a data lake nobody scoped access to properly. By the time any of it surfaces as a finding, hundreds of workloads depend on it.
SEC549 is about catching those decisions before they harden. Five days of live, virtual instruction where you design across AWS, Azure, and Google Cloud rather than committing to one provider's view of the world. The course follows a fictional enterprise through its migration, and each section ends with CloudWars, where teams design and present a plan for an acquired startup.
During the Week, You'll Work Through:
- 15 hands-on labs
- 25 security architecture reviews
- 10 CloudWars challenge rounds and a team presentation capstone
- Threat modeling, Entra ID to AWS single sign-on, and organization policy design
- Conditional access, AWS Cognito user and identity pools, and workload identity federation
- Hub and spoke architecture, centralized traffic inspection, and BigQuery data lake security
Architecting for Cloud AI Services
SEC549 covers AI service architecture directly: trust boundaries and inference paths for cloud AI services, agent identity and secret management, micro-segmentation for agentic applications, and extending data perimeters to cover AI workloads that reach sensitive stores. You’ll get 30 CPE credits for this course, and it’s aligned to the GIAC Cloud Security Architecture and Design (GCAD) certification.
Who Should Take This Course?
Cloud and security architects, solutions architects, security and cloud engineers, DevOps engineers, and anyone planning a migration, evaluating new cloud offerings, or managing cloud identity and network design. Familiarity with the AWS, Azure, and Google consoles is expected going in.
