Cloud Security
AWS, Azure, GCP, Kubernetes — IAM, posture, hardening, audits.
Cloud Detection and Response for AWS: Threat Hunting Playbook for 2026
A practitioner playbook for AWS CDR. CloudTrail rules, GuardDuty triage, three end-to-end response playbooks, and the telemetry stack Indian SOCs need.
Cloud SecuritySBOM Operations at Enterprise Scale: CycloneDX, SPDX, and SLSA Provenance
Moving from SBOM generation to SBOM operations. Dependency-Track, reachability, VEX, SLSA Build L3, vendor SBOM intake, and a maturity model for grading…
Cloud SecurityKubernetes Pod Security in Production: PSA, Kyverno, and OPA Gatekeeper Compared
Comparative analysis of the three dominant Kubernetes policy engines. When to use which, how to compose them, and a defensible migration from…
Cloud SecurityScenario Brief: How Post-Quantum TLS Could Roll Out Across UPI Infrastructure
Tabletop-ready forecast: an illustrative roadmap for ML-KEM-based hybrid TLS across UPI switch-to-issuer links and the CIO action plan around cryptography inventory.
Cloud SecurityScenario Brief: Pod Escape via Cgroup Namespace TOCTOU — A Containerd Threat Model
Tabletop-ready scenario: a hypothetical containerd pod-escape via TOCTOU race. Why baseline Pod Security Admission is no longer enough and what to harden.
AcademyModule 23 · Serverless Security — Functions, Event Sources, API Gateway
The serverless threat model What you no longer manage: OS patches, container runtime, network firewall (mostly). What becomes more critical: function code,…
AcademyModule 21 · Cloud Workload Protection (CWPP) — VMs, Containers, Serverless
CWPP vs CSPM CSPM CWPP Configuration of cloud resources What is running on those resources Public buckets, broad SGs, unencrypted volumes Malware,…
AcademyModule 22 · Kubernetes Security at Production Scale
The four production K8s domains Cluster security: API server, etcd, kubelet, control plane hardening. Workload security: Pod Security Standards, admission control, runtime…
AcademyModule 19 · Cloud Security Posture Management (CSPM) at Production Scale
What CSPM tools do Connect to cloud accounts via API; continuously enumerate resources and configurations; check against benchmark rules; report findings. Tool…
AcademyModule 20 · Securing Multi-Cloud Architectures
Why organisations go multi-cloud Resilience against single-provider outage. Regulator preference (RBI may prefer certain providers for specific workloads). Best-of-breed (Azure for M365…