Securing a Cloud Estate You Didn't Build

課程簡介

Nobody's first cloud estate is one they designed. It arrives already built, by people who have left, documented in spreadsheets that disagree with each other and with the platform, with one half-finished project that everybody believes is finished. The instinct is to read everything first. That instinct is the reason most of these engagements produce nothing for six weeks. This segment teaches the opposite order, which is the order that works: do not read the documentation, take one slice of the estate, work backwards from the platform to find out what is actually there, and build a mind map with the unknowns marked in red. Then follow the data flow, then permissions, then least privilege, and only then the network — the order everybody does in reverse, and the reason so much cloud security work formalises a mess instead of reducing it. Along the way: what a cloud security score measures, what it cannot see, and how to accept the number you were asked for without letting it become the objective. Why identity is the only thing that spans an estate like this, and what time-boxed privilege looks like when it is built to be faster than the ticket queue rather than more correct than it. One incident, told for what it teaches rather than for its size: a key served to anyone who asked, a bill that went from twenty thousand to two hundred thousand, and the three controls that each, alone, would have stopped it. And one thing this catalogue does not teach anywhere else: how to refuse. A client asking for a Kubernetes-scale answer to a spreadsheet-scale problem is asking in good faith, and saying no to them without losing the engagement is a skill with words in it. You get the words. You finish with the artefact: a prioritised remediation plan for an estate you did not build, ranked by business impact rather than by severity rating, and the three things you would do in week one — at least two of which somebody other than you has agreed to do. Everything here is read-only work. No labs touch a live system, none require write access, and none teach you to find exposed files on estates you do not own. Permission first, scope respected, staging not production, every time.

1. 01 The Estate You Were Handed

   3 堂課程·1h 43m

   You have four weeks and no write access. The estate was built by people who have left. The fifteen spreadsheets are five companies' aspirations written at five different times, and not one of them…

2. 02 The Order of Operations

   3 堂課程·1h 50m

   Most people start at the network, because that is what firewall experience prepares you for and because there is usually a half-built network project lying around inviting you to finish it. Start…

3. 03 Score, Identity and Keys

   3 堂課程·1h 52m

   The score measures whether your settings are right, which is about a third of what goes wrong in an estate nobody built on purpose. Take the number. Then bring three of your own that cannot be moved…

4. 04 What You Recommend, and What You Refuse

   3 堂課程·2h 10m

   A refusal without an alternative is obstruction, and a refusal without a reversal condition is an opinion. This module gives you the words for both, and then makes you produce the document they…

常見問題

我將在 Securing a Cloud Estate You Didn't Build 中學到什麼？

You have been handed a cloud estate built by five companies that merged, spread across two providers, with roughly 740 resources, fifteen spreadsheets of policies and read-only access. This segment is the method for getting an opinion worth having in four weeks, and the prioritised week-one plan you

我需要事先具備經驗嗎？

建議在開始 Securing a Cloud Estate You Didn't Build 前具備一些先備知識。

Securing a Cloud Estate You Didn't Build 需要多長時間？

Securing a Cloud Estate You Didn't Build 包含 4 個單元和 12 堂課程。你可以按自己的進度學習。

我如何取得存取權限？

Securing a Cloud Estate You Didn't Build 包含在任何付費訂閱方案中。