Cloud Security Architecture for the Enterprise
1h 16mAdvanced2025-07-11
Authors

Karl Ots
Cloud and Cybersecurity Expert, Azure MVP, Microsoft Regional Director
Course details
In this course, cybersecurity expert Karl Ots covers the core design pillars of a strong cloud security architecture, taking a vendor-agnostic look at what should be built into a cloud security architecture and why. Karl covers topics that include exploring cloud compliance monitoring solutions, translating existing security architecture into cloud security architecture, constructing custom shared responsibility models, and much more. Develop the skills needed to build a securely architected cloud environment that fits the risk appetite and governance requirements of your organization’s cloud environment. This course will not focus on how to configure cloud security controls with a specific cloud vendor. Instead, this course covers what a cloud security architecture should include and why.
Skills covered
Identity and Access ManagementCloud FoundationsCloud SecurityNetwork SecurityCybersecurityCloud ComputingOne-Off
Concepts
0. Introduction
- 01 - Importance of cloud security architecture
- 02 - What you should know
1. Introduction to Cloud Security Architecture
- 03 - Cloud security architecture components
- 04 - Shared responsibility model
- 05 - Cloud security frameworks
- 06 - Multicloud security architecture
2. Identity and Access Management
- 07 - Cloud identity providers
- 08 - Control plane authorization
- 09 - Data plane authorization
- 10 - Cloud permission creep
- 11 - Cloud Infrastructure Entitlement Management (CIEM)
- 12 - Zero Trust identity architecture
3. Logging and Monitoring
- 13 - Cloud security posture monitoring
- 14 - Cloud-native application protection (CNAPP)
- 15 - Cloud compliance monitoring
- 16 - Cloud-native incident management
- 17 - Logging and monitoring architecture
- 18 - Cloud drift detection
4. Cloud Network Security
- 19 - IaaS network controls
- 20 - PaaS network controls
- 21 - Zero Trust cloud network security architecture
- 22 - Securing multicloud networks
5. Communicating Across Teams
- 23 - Effective communication of cloud security designs
- 24 - Tailoring technical communication for different stakeholders
- 25 - Documenting architectural decisions
Conclusion
- 26 - Learning more about cloud security architecture