PROTECT YOUR RESOURCES
Secure Cloud Design
Explore how identity, network boundaries, and protected storage work together to limit access to cloud resources.
THE BIG IDEAS
What you'll explore
- Describe the purpose of least-privilege permissions.
- Separate a public application endpoint from its underlying resources.
- Explain what HTTPS protects and why request logging matters.
A CONCEPT TO START WITH
Give each role a purpose
The person who deploys an application and the application itself have different jobs. Deployment may require creating infrastructure, while the running application may only need to read one set of files. Assigning separate roles helps keep those permissions distinct. It also makes review easier: each permission should have a clear reason to exist.
THE PATH AHEAD
Course outline
- 01
Identity and permissions
Give each workload only the access it needs.
- 02
Network boundaries
Use permitted traffic paths to limit exposure.
- 03
Protecting information
Consider data both in transit and in storage.
- 04
Seeing what happened
Use logs to investigate access and application behavior.