Cloud Security Training, Courses, and Resources
Cloud security encompasses technologies, policies, and controls that protect data, applications, and infrastructure in cloud environments. Knowing how to safeguard sensitive information in cloud environments is crucial for preventing cyber threats, ensuring compliance, and maintaining business continuity.
Ready to Lead and Secure the Future of Cloud Security
Cloud security is business-critical, requiring cyber professionals to navigate evolving threats, secure cloud environments, and align security goals with business objectives. At SANS, we believe that effective cloud security training should be a business enabler that evolves as fast as the technology. It must equip practitioners with hands-on technical expertise, in-depth knowledge of multiple Cloud Service Providers (CSPs), and strategic insight to build sustainable security practices in an era where innovation outpaces workforce knowledge.
What You'll Learn
Cloud Security Architecture and Design
Learn to build secure, resilient cloud environments and align security frameworks with business strategy.
Threat Detection and Incident Response
Develop the ability to monitor, detect, and respond to cloud-specific threats and security breaches.
Cloud Defense Engineering and Automation
Design and deploy automated security controls, IaC protections, and proactive defenses in cloud-native environments.
Student Insights
SANS is a world leader in Cloud Security for a reason. I'm never disappointed when I attend sessions, and I know I'm in for a torrent of incredibly useful information.
Meet Your Experts
Ahmed Abugharbia
Co-founderAhmed Abugharbia is a SANS Certified Instructor and founder of Cyberdojo, focusing on GenAI and Cloud Security. With over 17 years of experience in security, Ahmed has worked and led projects in cloud security, network and application security, as well as incident handling.
Learn moreBrandon Evans
PartnerBrandon is a Partner at Cyverity and SANS Senior Instructor at the SANS Institute. He is lead author for SEC510: Cloud Security Engineering and Controls; GPCS holder #1, multi-year RSA Conference presenter, and cloud Bug Bounty collector.
Learn moreEric Johnson
Principal Security EngineerEric is a co-founder and principal security engineer at Puma Security, focusing on modern static analysis product development and DevSecOps automation. A SANS Fellow, he is co-author and instructor for three SANS Cloud Security courses.
Learn moreFrank Kim
Venture AdvisorFrank Kim is the Founder of ThinkSec, a security consulting and CISO advisory firm. He leads the Cybersecurity Leadership and Cloud Security curricula at SANS, as well as authors and instructs multiple SANS courses.
Learn moreShaun McCullough
Cloud Security ArchitectShaun McCullough spent 20+ years at the NSA working in cyber operations as a software engineer and technical director of Blue, Red, and Hunt teams. He is currently a staff level Cloud Security Engineer at GitHub.
Learn moreRyan Nicholson
OwnerRyan’s extensive experience, including roles as a cybersecurity engineer for major Department of Defense cloud projects and as a lead auditor, underscores his dedication to enhancing the security posture of critical systems.
Learn moreExplore Careers Within Cloud Security
Upcoming Events
- Slide 1 of 10
Securing Gen AI RAG Data using Azure AI Search
Large Language Models (LLMs) and Generative AI have inherent limitations, such as outdated knowledge, lack of private data access, and the potential for hallucinations. In this session, we will introduce a strategy for overcoming these challenges: Retrieval-Augmented Generation (RAG).
WebinarCloud SecurityWebcast Abstract Image- 9 Dec 2025
- 12:00 EST
- Eric Johnson
- Slide 2 of 10
Silence of the Logs: Detecting Defense Impairment in AWS and Azure
This talk will walk through real-world defense impairment techniques across AWS and Azure. We'll dig into what it looks like when attackers suppress their own IPs in GuardDuty, redirect CloudTrail logs to buckets they control, tamper with Azure diagnostic settings, or disable Defender entirely.
WebinarCloud SecurityMan presenting webcast- 10 Dec 2025
- 13:00 EST
- Ryan Thompson
- Slide 3 of 10
Mysteries in the Cloud: The Baker221b Cyber Sleuth Challenge
Join the renowned investigators of Baker221b and step into the role of a digital detective.
WebinarCloud SecurityWebcast Abstract Image- 8 Jan 2026
- 13:00 EST
- Ryan Nicholson
- Slide 4 of 10
The Future of Network Security: A Thought Leader's Guide to Hybrid Mesh Firewall
In this webinar, experts from SANS and Cisco will explore the hybrid mesh firewall approach—what it is, why it’s critical today, and effective deployment at scale.
WebinarCloud SecurityMan presenting webcast- 9 Jan 2026
- 13:00 EST
- Kevin Garvey & Rick Miles
- Slide 5 of 10
SANS 2026 Kubernetes & CNAPP Forum
The SANS 2026 Kubernetes and CNAPP Forum is a focused, one-day event designed for security professionals, DevOps teams, and cloud architects seeking to secure modern, containerized applications.
WebinarCloud SecurityMan presenting webcast- 15 Jan 2026
- 10:00 EST
- Dave Shackleford
- Slide 6 of 10
MCP and the Question of Authorization
The Model Context Protocol (MCP) is becoming increasingly important in enabling and expanding the capabilities of agents.
WebinarArtificial IntelligenceWebcast Abstract Image- 20 Jan 2026
- 13:00 EST
- Ahmed Abugharbia
- Slide 7 of 10
Beyond the Breach - Why Unified DFIR Is the Future of Enterprise Cyber Resilience
This session explores the strategic shift toward unified DFIR platforms that merge forensic-grade investigation capabilities with incident response. Attendees will gain insight into how integrating evidence collection, artifact triage, endpoint isolation, and threat remediation into a single workflow reduces tool fatigue, shortens dwell time, and improves regulatory compliance.
WebinarDigital Forensics and Incident ResponseTwo people presenting a webcast- 22 Jan 2026
- 13:00 EST
- Carl Bolterstein
- Slide 8 of 10
ML RAG, Fine-tuning and Security
This webcast explores the evolution of machine learning context-based prompting, RAG, Agentic AI, and fine-tuning and associated risks.
WebinarCloud SecurityWebcast Abstract Image- 18 Feb 2026
- 15:00 EST
- Viswanath (Vis) Chirravuri
- Slide 9 of 10
SANS 2026 Cybersecurity Readiness in Government Survey Insights: Is the Public Sector Ready for the Next Cyber Threat?
Join us for an exclusive virtual event as we unveil the results of a comprehensive nationwide survey of cybersecurity leaders and IT strategists across government.
WebinarCyber DefenseWebcast Abstract Image- 28 May 2026
- 10:30 EDT
- Ryan Nicholson
- Slide 10 of 10
SANS 2026 Cloud Security Survey Insights: Navigating the Evolving Landscape of Threats, Tools, and Priorities
The 2026 SANS Cloud Security Research Survey brings together insights from security leaders and practitioners worldwide. This year’s study examines the current state of cloud security, highlighting key challenges, top threats, and the tools organizations are using—or wish they had—to secure cloud environments at scale. Join us for this exclusive webcast to explore the survey findings, gain practical insights, and benchmark your organization’s approach to cloud security.
WebinarCloud SecurityWebcast Abstract Image- 21 Oct 2026
- 10:30 EDT
- Serge Borso
Cloud Security Insights From The Experts
AI for Security and Security for AI: Navigating Opportunities and Challenges
Download the SANS ebook and learn how to strengthen your cloud and AI security strategies.
- Slide 1 of 3[画像:Whitepaper placeholder image]
SANS 2025 Multicloud Survey: Securing Multiple Clouds at Scale
WhitepaperWritten ByKenneth G. Hartman & Simon Vernon - Slide 2 of 3
- Slide 3 of 3[画像:Webcast Abstract Image]
SANS 2025 Cloud Security Exchange
WebinarFeaturesDr. Anton Chuvakin, Dr. Paul Vixie, Frank Kim, Simon Vernon, Brandon Evans, Dave Shackleford & Wesley Kuzma