Cloud Security & DevSecOps
Securing cloud accounts, containers and pipelines.
Beginner
Start here. No background needed beyond school maths.
AWS Shared Responsibility Model
What the cloud provider secures and what you must secure yourself. The same idea applies on every cloud.
Sign up to see the source
flAWS.cloud
A hands-on challenge of common AWS misconfigurations, with hints and explanations at each level.
Sign up to see the source
Advanced
Once the basics are comfortable.
Kubernetes Security Concepts
How to secure a cluster, its workloads and the supply chain around it.
Sign up to see the source
OWASP DevSecOps Guideline
How to build security checks into a CI/CD pipeline.
Sign up to see the source
Trivy Documentation
Scan container images, code and infrastructure files for vulnerabilities and secrets.
Sign up to see the source