Does this cover AWS, Azure, and GCP?

Yes. The job is taught once — identity, network, data, logs, incidents — and a translation table gives the service name in each cloud.

Is this a certification dump?

No. It is the work: block public storage, federate humans, give workloads roles, prove the log arrived, and revoke a leaked key. The scorecard at the end is the test.

← All guides

☁️ Blue team · 59 pages

Cloud security from the account diagram to the leaked-key drill.

Name: Cloud Security, A to Z
Brand: Cyber Rishav
SKU: cloud-security
Price: 499 INR
Availability: InStock
Author: Rishav Bhardwaj

Shared responsibility, human and workload identity, network, storage, pipelines, and the logs that prove it. The same control named in AWS, Azure, and GCP, plus the first hour of the incidents you will actually run.

“If you can revoke a key, prove the log arrived, and say the same control in three clouds, you are useful on Monday. The scorecard at the end is the bar.”— Rishav Bhardwaj

Why you need this — honestly

You know service names and still cannot say who owns a public bucket, or how a workload should get credentials.
AWS, Azure, and GCP look like three careers until someone puts the same control in one table.
You want a 90-day order and a scorecard, not a benchmark spreadsheet that never changes an incident.

What's inside

Written in plain language. No jargon for the sake of jargon. Every section ends with something you can do, not just read.

Chapter 01

The estate and identity

✓Shared responsibility, accounts, and blast radius
✓Humans: federation, MFA, break-glass
✓Workloads: roles instead of long-lived keys, IMDSv2

Chapter 02

Network, data, compute, pipeline

✓Private by default, no public admin ports, flow logs
✓Public storage blocked at the org, keys, backups in another account
✓Containers, serverless, and CI that assumes a role

Chapter 03

Proof, incidents, and the three clouds

✓Audit logs in an account the attacker cannot delete
✓Leaked key, public bucket, miner, disabled trail
✓One translation table for AWS, Azure, and GCP, plus a 90-day scorecard

Chapter 04

The syllabus, covered as work

✓IaaS, PaaS, SaaS, and public, private, hybrid, multi-cloud
✓SAML, OIDC, OAuth, RBAC vs ABAC, SSE, envelope encryption, mTLS, DLP
✓SAST, DAST, SBOM, Terraform, OPA, SIEM/SOAR/XDR, and the compliance map

Perfect if you are…

SOC analysts moving into cloudEngineers who own an AWS, Azure, or GCP accountAnyone who has to brief leadership on cloud risk

Pair Cloud Security, A to Z with these — each is a separate instant-download PDF by Rishav Bhardwaj.

How to learn cloud security as a practitioner, not a product list

Cloud security is identity, exposure, and proof. This guide walks that job from the account structure to a leaked key, and names the same control in AWS, Azure, and GCP.

Shared responsibility, blast radius, and the accounts that must exist
Human access versus workload roles, and why long-lived keys fail
Network, storage, pipelines, and the audit log in an account the workload team cannot delete
Four incidents and a 90-day scorecard you can run on a real account

Common questions

Does this cover AWS, Azure, and GCP?: Yes. The job is taught once — identity, network, data, logs, incidents — and a translation table gives the service name in each cloud.
Is this a certification dump?: No. It is the work: block public storage, federate humans, give workloads roles, prove the log arrived, and revoke a leaked key. The scorecard at the end is the test.

Instant PDF download

Cloud Security, A to Z

$12.02

59 pages · 6–8 hours · one-time purchase

International checkout

After you continue to payment, on the Cashfree page please select PayPal (scroll to International Walletif you don't see it).

Prices on this site are in USD. Cashfree may show the equivalent in ₹ — that is normal; PayPal lets you pay from outside India.

✓ 7-day money-back guarantee · instant PDF delivery · no subscription

847 professionals already downloaded this

Want every guide? Complete bundle for $43.35 →

Want live guidance? Book a 1-on-1 with me →

About me

Rishav Bhardwaj — cybersecurity practitioner & author of Cyber Rishav

I've trained 200+ analysts, built blue-team programs inside real enterprises, and still sit in the work — SOC triage, cloud risk, GRC, and IR. These guides are the same structured thinking I use in programs and 1-on-1s, written so you can act this week, not someday.

CISSPCCSKSecurity+CEHISO 27001

Rishav Bhardwaj

Cybersecurity practitioner · Blue team

200+

Analysts coached

10K+

Enterprise seats in IR programs

Deep-dive guides

Every guide in this library is something I use when coaching analysts and building programs — not content farm filler. If it does not help you act this week, it does not ship.