🛡️ Multi-Cloud Security Architecture Training Course: AWS, Azure, and GCP Design and Governance

Course Outline

Module 1: Multi-Cloud Strategy and Security Fundamentals

ü  Drivers and Challenges of Multi-Cloud Adoption

ü  The Shared Responsibility Model: Comparative Analysis

ü  Cloud Security Frameworks (NIST CSF, CIS Benchmarks)

ü  Defining the Baseline Security Architecture (Landing Zone)

ü  Practical Session: Reviewing a Sample Multi-Cloud Landing Zone Architecture

Module 2: Unified Cloud Identity and Access Management (IAM)

ü  AWS IAM, Azure AD (Entra ID), and GCP IAM Deep Dive

ü  Implementing Federated Identity (SAML/OIDC) for Single Sign-On (SSO)

ü  Cross-Cloud Role Mapping and Least Privilege Access Principles

ü  Utilizing Identity as the Perimeter (Zero Trust Model)

ü  Practical Session: Configuring Identity Federation between Two Clouds

Module 3: Network Security Architecture and Segmentation (VPC/VNet)

ü  Designing Secure VPC/VNet Topologies Across Clouds

ü  Cross-Cloud Connectivity: Peering, VPNs, and Dedicated Circuits

ü  Network Security Controls: Security Groups, NSGs, and Firewall Rules

ü  Advanced Segmentation with Micro-Segmentation Techniques

ü  Practical Session: Designing a Hybrid Network Security Architecture Diagram

Module 4: Data Protection, Encryption, and Key Management (KMS)

ü  Data Classification and Storage Security Best Practices

ü  Comparative Analysis of KMS Services (AWS KMS, Azure Key Vault, GCP KMS)

ü  Implementing Customer-Managed Encryption Keys (CMEK)

ü  Data Loss Prevention (DLP) Strategies Across Cloud Storage

ü  Practical Session: Configuring Data Encryption and Key Rotation in a Cloud Storage Service

Module 5: Security Governance and Compliance as Code

ü  Enforcing Policy with Azure Policy, AWS Config, and GCP Organization Policies

ü  Automated Compliance Checks using CIS Benchmarks

ü  Using Terraform/CloudFormation for Security Infrastructure Automation

ü  Continuous Auditing and Reporting for Regulatory Compliance

ü  Practical Session: Writing and Deploying a Policy as Code Script to Enforce a Security Rule

Module 6: Centralized Security Monitoring and Logging

ü  Aggregating Logs from CloudTrail, Azure Sentinel/Monitor, and GCP Cloud Logging

ü  Utilizing Centralized Security Dashboards: AWS Security Hub, Azure Security Center, GCP Security Command Center

ü  Implementing Security Information and Event Management (SIEM) Integration

ü  Designing a Unified Alerting and Notification System

ü  Practical Session: Configuring a Centralized Dashboard for Multi-Cloud Alerts

Module 7: Vulnerability and Configuration Management

ü  Automated Scanning of Images and Registries (e.g., AWS ECR, Azure ACR)

ü  Agent-Based vs. Agentless Vulnerability Scanning

ü  Enforcing Configuration Drift Detection and Remediation

ü  Secure Baseline Configuration Hardening for Compute Resources

ü  Practical Session: Configuring Automated Vulnerability Scanning for a Container Registry

Module 8: Multi-Cloud Incident Response and Forensics

ü  Developing a Unified Multi-Cloud Incident Response Playbook

ü  Procedures for Isolation, Containment, and Restoration in Cloud Environments

ü  Legal and Forensic Data Collection Challenges Across Cloud Boundaries

ü  Utilizing Cloud-Native Tools for Security Investigation

ü  Practical Session: Simulating and Documenting a Cloud Security Incident Response

Module 9: Securing Serverless, Containers, and Cloud Workloads

ü  Securing Serverless Functions (Lambda, Azure Functions, Cloud Functions)

ü  Container Security Best Practices (e.g., Pod Security Standards)

ü  Runtime Protection for Workloads and Host Hardening

ü  Securing CI/CD Pipelines (DevSecOps Integration)

ü  Practical Session: Implementing Security Checks in a CI/CD Pipeline Stage

Module 10: Designing the Unified Multi-Cloud Security Blueprint

ü  Integrating the Components into a Cohesive Security Architecture

ü  Cost Optimization for Cloud Security Services

ü  Developing a Phased Implementation Roadmap

ü  Presenting the Security Blueprint to Executive Stakeholders

ü  Practical Session: Final Project: Presentation of a Unified Multi-Cloud Security Blueprint

About Our Trainers

Our trainers are certified professionals (e.g., CISSP-Cloud, AWS/Azure/GCP Security Architect) with 15+ years of experience leading multi-cloud security teams at global organizations. They possess direct, hands-on expertise in designing and securing converged architectures, implementing large-scale governance frameworks, and managing complex cloud migration risks across the three major providers. Their background ensures a highly strategic and technically proficient learning experience.

Quality Statement

Phoenix Training Center is committed to delivering a premier Multi-Cloud Security Architecture Training Course. Our curriculum is continuously updated to reflect the latest cloud-native security features, API changes, and industry best practices. We guarantee a challenging, practical, and highly strategic learning experience focused on building secure, compliant, and scalable multi-cloud solutions.

Admission Criteria

ü  Participants should be reasonably proficient in English. 

ü  Applicants must live up to Phoenix Center for Policy, Research and Training admission criteria.

Terms and Conditions

1. Discounts: Organizations sponsoring Four Participants will have the 5th attend Free
2. What is catered for by the Course Fees: Fees cater for all requirements for the training – Learning materials, Lunches, Teas, Snacks and Certification. All participants will additionally cater for their travel and accommodation expenses, visa application, insurance, and other personal expenses.
3. Certificate Awarded: Participants are awarded Certificates of Participation at the end of the training.
4. The program content shown here is for guidance purposes only. Our continuous course improvement process may lead to changes in topics and course structure.
5. Approval of Course: Our Programs are NITA Approved. Participating organizations can therefore claim reimbursement on fees paid in accordance with NITA Rules.

Booking for Training

Simply send an email to the Training Officer on training@phoenixtrainingcenter.com and we will send you a registration form. We advise you to book early to avoid missing a seat to this training.

Or call us on +254720272325 / +254737296202

Payment Options

We provide 3 payment options, choose one for your convenience, and kindly make payments at least 5 days before the Training start date to reserve your seat:

1. Groups of 5 People and Above – Cheque Payments to: Phoenix Center for Policy, Research and Training Limited should be paid in advance, 5 days to the training.
2. Invoice: We can send a bill directly to you or your company.
3. Deposit directly into Bank Account (Account details provided upon request)

Cancellation Policy

1. Payment for all courses includes a registration fee, which is non-refundable, and equals 15% of the total sum of the course fee.
2. Participants may cancel attendance 14 days or more prior to the training commencement date.
3. No refunds will be made 14 days or less before the training commencement date. However, participants who are unable to attend may opt to attend a similar training course at a later date or send a substitute participant provided the participation criteria have been met.

Tailor-Made Courses

We understand that every organization has unique challenges and opportunities as well as unique training needs. Phoenix Training Center offers tailor-made courses designed to address specific requirements and challenges faced by your team or organization. Whether you need a customized curriculum, a specific duration, or on-site delivery, we can adapt our expertise to provide a training solution that perfectly aligns with your objectives.

We can customize this Course to focus on your industry, specific risk profile, or internal stakeholder dynamics. Contact us to discuss how we can create a bespoke training program that maximizes value and impact for your team. For further inquiries, please contact us on Tel: +254720272325 / +254737296202 or Email training@phoenixtrainingcenter.com

Accommodation and Airport Pick-up

For physical training attendees, we can assist with recommendations for accommodation near the training venue. Airport pick-up services can also be arranged upon request to ensure a smooth arrival. Please inform us of your travel details in advance if you require these services. For reservations contact the Training Officer on Email: training@phoenixtrainingcenter.com or on Tel: +254720272325 / +254737296202