Cloud Security Training, Courses, and Resources
Cloud security encompasses technologies, policies, and controls that protect data, applications, and infrastructure in cloud environments. Knowing how to safeguard sensitive information in cloud environments is crucial for preventing cyber threats, ensuring compliance, and maintaining business continuity.
Ready to Lead and Secure the Future of Cloud Security
Cloud security is business-critical, requiring cyber professionals to navigate evolving threats, secure cloud environments, and align security goals with business objectives. At SANS, we believe that effective cloud security training should be a business enabler that evolves as fast as the technology. It must equip practitioners with hands-on technical expertise, in-depth knowledge of multiple Cloud Service Providers (CSPs), and strategic insight to build sustainable security practices in an era where innovation outpaces workforce knowledge.
What You'll Learn
Cloud Security Architecture and Design
Learn to build secure, resilient cloud environments and align security frameworks with business strategy.
Threat Detection and Incident Response
Develop the ability to monitor, detect, and respond to cloud-specific threats and security breaches.
Cloud Defense Engineering and Automation
Design and deploy automated security controls, IaC protections, and proactive defenses in cloud-native environments.
Student Insights
SANS is a world leader in Cloud Security for a reason. I'm never disappointed when I attend sessions, and I know I'm in for a torrent of incredibly useful information.
Meet Your Experts
Ahmed Abugharbia
Co-founderAhmed Abugharbia is a SANS Certified Instructor and founder of Cyberdojo, focusing on GenAI and Cloud Security. With over 17 years of experience in security, Ahmed has worked and led projects in cloud security, network and application security, as well as incident handling.
Learn moreBrandon Evans
PartnerBrandon is a Partner at Cyverity and SANS Senior Instructor at the SANS Institute. He is lead author for SEC510: Cloud Security Engineering and Controls; GPCS holder #1, multi-year RSA Conference presenter, and cloud Bug Bounty collector.
Learn moreEric Johnson
Principal Security EngineerEric is a co-founder and principal security engineer at Puma Security, focusing on modern static analysis product development and DevSecOps automation. A SANS Fellow, he is co-author and instructor for three SANS Cloud Security courses.
Learn moreFrank Kim
Venture AdvisorFrank Kim is the Founder of ThinkSec, a security consulting and CISO advisory firm. He leads the Cybersecurity Leadership and Cloud Security curricula at SANS, as well as authors and instructs multiple SANS courses.
Learn moreShaun McCullough
Cloud Security ArchitectShaun McCullough spent 20+ years at the NSA working in cyber operations as a software engineer and technical director of Blue, Red, and Hunt teams. He is currently a staff level Cloud Security Engineer at GitHub.
Learn moreRyan Nicholson
OwnerRyan’s extensive experience, including roles as a cybersecurity engineer for major Department of Defense cloud projects and as a lead auditor, underscores his dedication to enhancing the security posture of critical systems.
Learn moreExplore Careers Within Cloud Security
Upcoming Events
- Slide 1 of 7
Fall Cyber Solutions Fest 2025: Cloud Identity and Access Management Track
This focused track explores the ever-evolving world of Cloud IAM, diving into modern strategies, common missteps, and emerging tools designed to help organizations reclaim control over sprawling identities and creeping permissions.
WebinarCloud SecurityWebcast- 5 Nov 2025
- 09:30 EST
- Chris Edmundson
- Slide 2 of 7
Beyond the Basics: What Cloud Defenders Need to Know
The cloud landscape is a double-edged sword: It offers incredible agility and scalability but also introduces a new set of security complexities.
WebinarCloud SecurityWebcast Abstract Image- 11 Nov 2025
- 13:00 EST
- Serge Borso
- Slide 3 of 7
Securing Gen AI RAG Data using Azure AI Search
Large Language Models (LLMs) and Generative AI have inherent limitations, such as outdated knowledge, lack of private data access, and the potential for hallucinations. In this session, we will introduce a strategy for overcoming these challenges: Retrieval-Augmented Generation (RAG).
WebinarCloud SecurityWebcast Abstract Image- 9 Dec 2025
- 12:00 EST
- Eric Johnson
- Slide 4 of 7
Silence of the Logs: Detecting Defense Impairment in AWS and Azure
This talk will walk through real-world defense impairment techniques across AWS and Azure. We'll dig into what it looks like when attackers suppress their own IPs in GuardDuty, redirect CloudTrail logs to buckets they control, tamper with Azure diagnostic settings, or disable Defender entirely.
WebinarCloud SecurityMan presenting webcast- 10 Dec 2025
- 13:00 EST
- Ryan Thompson
- Slide 5 of 7
SANS 2026 Kubernetes & CNAPP Forum
The SANS 2026 Kubernetes and CNAPP Forum is a focused, one-day event designed for security professionals, DevOps teams, and cloud architects seeking to secure modern, containerized applications.
WebinarCloud SecurityMan presenting webcast- 15 Jan 2026
- 10:00 EST
- Dave Shackleford
- Slide 6 of 7
SANS 2026 Cybersecurity Readiness in Government Survey Insights: Is the Public Sector Ready for the Next Cyber Threat?
Join us for an exclusive virtual event as we unveil the results of a comprehensive nationwide survey of cybersecurity leaders and IT strategists across government.
WebinarCyber DefenseWebcast Abstract Image- 20 May 2026
- 10:30 EDT
- Ryan Nicholson
- Slide 7 of 7
SANS 2026 Cloud Security Survey Insights: Navigating the Evolving Landscape of Threats, Tools, and Priorities
The 2026 SANS Cloud Security Research Survey brings together insights from security leaders and practitioners worldwide. This year’s study examines the current state of cloud security, highlighting key challenges, top threats, and the tools organizations are using—or wish they had—to secure cloud environments at scale. Join us for this exclusive webcast to explore the survey findings, gain practical insights, and benchmark your organization’s approach to cloud security.
WebinarCloud SecurityWebcast Abstract Image- 21 Oct 2026
- 10:30 EDT
- Serge Borso
Cloud Security Insights From The Experts
Navigating the Challenges of Securing Hybrid Environments
This webcast explores how to bring clarity and control back to your hybrid security strategy—with practical guidance on Zero Trust, unified monitoring, and the evolving role of AI in modern defense.
- Slide 1 of 2[画像:Webcast Abstract Image]
SANS 2025 Cloud Security Exchange
WebinarFeaturesDr. Anton Chuvakin, Dr. Paul Vixie, Frank Kim, Simon Vernon, Brandon Evans, Dave Shackleford & Wesley Kuzma - Slide 2 of 2[画像:Red Cloud Upload Symbols]
Securing Your Systems at Cloud Native Speed: What’s new in SEC540 Training
BlogWritten ByEric Johnson