Advent of Cloud Security - 5 Days IN & Counting! 🤩

Hello from the Cloud-verse!

This week’s Cloud Security Newsletter Topic is Advent of Cloud Security 2024 - DevSecOps, HoneyTraps and Container Security in AWS !  (continue reading) 

Incase, this is your 1st Cloud Security Newsletter! You are in good company!
You are reading this issue along with your friends and colleagues from companies like Netflix, Citi, JP Morgan, Linkedin, Reddit, Github, Gitlab, CapitalOne, Robinhood, HSBC, British Airways, Airbnb, Block, Booking Inc & more who subscribe to this newsletter, who like you want to learn what’s new with Cloud Security each week from their industry peers like many others who listen to Cloud Security Podcast & AI CyberSecurity Podcast every week.

Cloud Security Topic of the Week 

The Advent of Cloud Security 2024 - DevSecOps, HoneyTraps and Container Security in AWS!

Welcome to this week's edition of the Cloud Security Newsletter!

This week, marks the first week of Advent of Cloud Security a Cloud Security Podcast initiative.

🌟 What is Advent of Cloud Security?

Advent of Cloud Security is for all levels and for 24 Days of December,2024 we are bringing the Movers and Shakers of Cloud Security to share their AWS, Azure, GCP & Kubernetes knowledge so you can learn from some of the BEST!

Featured Experts This Week

• Ashish Rajan

• Adan Álvarez Vilchez

• Damien Burks

• Anjali S & Divyanshu S

Day 1

👉🏾 The Complete Senior Cloud Security Engineer Roadmap:

👉🏾 Snippet from Day 1 - The RoadMap for a Senior Cloud Security Role in 2025
- 8 Cloud Security Areas common to Senior Cloud Security Engineers
- How to appear Senior infront of your Manager even before the promotion
- How to Add new Cloud Security Skills to your existing CyberSecurity & Cloud skills.

Day 2

👉🏾 Top 3 Cloud Security Projects That Give you an unFAIR Advantage:

👉🏾 Snippet from Day 2 - 3 Cloud Security Projects for a Senior Cloud Security Role You can Copy
- 3 Cloud Security Project Examples common for Senior Cloud Security Engineer roles
- 3 side projects to to build Skillsets for a Senior role
- How to learn from other Senior Cloud Security folks for new CyberSecurity & Cloud skills.

    This week's Issue is supported by Cloud Security Bootcamp

If you are looking to upskill your AWS Cloud Security or Kubernetes on AWS Cloud knowledge, you might want to check out the AWS Security Masterclass from Cloud Security Bootcamp.

Sign up today for upcoming AWS Security & Kubernetes Security December 2024 MasterClass and learn what Cloud Security Engineers and Architect do for work during the MasterClass with Labs,Walkthrough of the AWS Services used to build Applications in Cloud.

Day 3

👉🏾 How to LEAVE Honey Traps (Canary Tokens) inAWS Account to TRAP Bad Actors:

👉🏾 Snippet from Day 3 - Building HoneyTraps in AWS Cloud
- Setting up HoneyTraps in S3 & DynamoDB with fake data
- Response for Defenders when an attacker triggers a HoneyTrap
- Defending AWS Accounts with Honey Traps

Day 4

👉🏾 Building a Cloud Native DevSecOps Pipeline using Terraform in AWS Cloud:

👉🏾 Snippet from Day 4 Building a Cloud Native DevSecOps Pipeline using Terraform in AWS Cloud
- Refresh of What DevSecOps is in 2024
- Walkthrough of Terraform templates required for
- Deploy a Container App in EKS using CodeBuild & CodePipeline
- Scanning Container Image, SCA using Open Source
- Integrating Security in a Cloud Native Pipeline on AWS

Day 5

👉🏾 Setting up EKS Lab to Learn Container Security:

👉🏾 Snippet from Day 5 - Setting up EKS Lab to Learn Container Security
- Refresh of Container Security,
- Setup of Amazon EKS Lab Infra For EKS Goat
- Lab: Deploying a Vulnerable AWS EKS Infra
- Theory: Overview of Docker from a Security Perspective
- Lab: Secret Exfiltration with Dive
- Lab: Docker Security Scans

What’s Next Week?

Next week we will be going into the next 5 days you can expect Incident Response (hint).

🔗 Related Resources 📚

HoneyTrail - https://github.com/adanalvarez/HoneyTrail
DevSecOps Pipeline Github - https://github.com/The-DevSec-Blueprint/aws-devsecops-pipeline
EKS Goat - https://github.com/kubernetesvillage/ecr_eks_security_masterclass_public

We would love to hear from you📢 for a feature or topic request or if you would like to sponsor an edition of Cloud Security Newsletter.

Thank you for continuing to subscribe and Welcome to the new members in tis newsletter community💙

Peace!

Shilpi Bhattacharjee

Was this forwarded to you? You can Sign up here, to join our growing readership.

Want to sponsor the next newsletter edition! Lets make it happen

Have you joined our FREE Monthly Cloud Security Bootcamp yet?

checkout our sister podcast AI Cybersecurity Podcast