In the cloud, security is mostly a matter of configuration and access control, which makes it a design decision rather than an afterthought. A cloud architect decides who and what can reach each resource, how data is protected, and which rules the system has to meet. This module covers the main building blocks.
You'll start with identity and access management (IAM): how policies and roles work, and how to apply the principle of least privilege so that every user and service has only the access it needs. Then you'll look at encryption and key management using AWS KMS, which protects your data even if something else goes wrong.
The second half moves up to design philosophy and rules. Zero trust replaces the idea of a trusted internal network with continuous verification, and compliance frameworks such as SOC 2, HIPAA, PCI-DSS, and GDPR define what your cloud setup may have to prove to auditors and customers. Next up is infrastructure as code, where these controls become repeatable.
A deep dive into the core components of AWS Identity and Access Management, including how policies are evaluated and how to apply the principle of least privilege.
A beginner-friendly look at AWS Key Management Service and how it creates, stores, and secures the encryption keys used across AWS.
An introduction to zero trust security architecture and why modern organizations are moving away from trusting everything inside the network perimeter.
An overview of the major cloud compliance and regulatory frameworks, including SOC 2, HIPAA, PCI-DSS, and GDPR, and what they mean for cloud environments.