Module 1 · The Shared Responsibility Illusion 🔒
April 22, 2026
Cloud providers secure infrastructure; customers secure configuration. Every breach happens on customer side.
Academy
Read more
Module 2 · Cloud IAM — Where Most Breaches Live 🔒
Wildcard permissions, iam:PassRole privesc, cross-account trust, Pacu, PMapper. IAM is the hardest part of cloud security.
Module 3 · Metadata Endpoints — Still the Killer Chain 🔒
169.254.169.254, Capital One, IMDSv1 vs v2, container metadata, K8s service accounts. SSRF → cloud takeover.
Module 4 · Cross-Account Trust Attacks 🔒
Overly broad Principal, confused deputy, External ID, Azure Lighthouse. MSSP compromise cascades.
Module 5 · Kubernetes — The Platform That Multiplies Attack Surface 🔒
Pod → node → cluster, service account tokens, RBAC paths, exposed kubelet/etcd. kube-hunter, peirates.
Module 6 · Serverless — New Surface, Not Smaller Surface 🔒
Lambda role credential theft, event source injection, dep vulns, supply chain. Serverless shifts attack surface.
Module 7 · Cloud Supply Chain — CI to Production 🔒
Codecov, CircleCI, SolarWinds patterns in cloud. OIDC federation, least-priv deploy roles, pinned artifacts.
Module 8 · Public Data Stores — The Classic 🔒
Public S3, open GCS, anonymous Azure Blob. Continues in 2026 despite a decade of awareness.
Module 9 · Cloud Detection — Different Telemetry, Different Rules 🔒
CloudTrail, Activity Log, Audit Log. Identity-first detection. GuardDuty/Defender/SCC. Maturity model.
Module 10 · Multi-Cloud — The Complexity Tax 🔒
Per-cloud skill, divergent defaults, N × CSPM. Multi-cloud without investment = weaker overall security.