Module 01: Cloud Security Foundations

Track 1 · Foundations · Time: ~1h · Pass: 8/10

Scenario

You just joined Cloudsmiths Inc., a fintech with 600 employees and 3 cloud providers (AWS, Azure, GCP). The CISO hands you a Post-it: "Prevent the next breach. Start tomorrow." Before you reach for tools, the CISO wants a one-page memo explaining how cloud security actually works: what you'll be defending, against whom, and where Prowler fits.

Learning objectives

By the end of this module you will:

1. Define cloud security in terms of the CIA triad and the SaaS/PaaS/IaaS stack.
2. Map common threats to the cloud control categories that mitigate them.
3. Explain CSPM, CIEM, CWPP, CNAPP, KSPM, and where Prowler fits.
4. Run a basic threat-modeling pass on a cloud architecture.