NOA Labs
☁️ Cloud Security · Corporate training

Cloud, Docker & Kubernetes Security

Secure cloud accounts, containers and Kubernetes clusters: IAM, network isolation, Pod Security, RBAC, secrets, runtime detection and cloud posture management.

Register your company → See the full outline ↓
$79 per employee · complete course
🗓️
3 weekends
Sat & Sun
⏱️
24 hours
6 live sessions
🎯
Advanced
Level
🧪
6 labs
Hands-on

Default hours 10:00 AM–2:00 PM (Asia/Karachi). Company pays — employees never pay individually.

About this training

As banks and fintechs move workloads to the cloud and Kubernetes, misconfiguration becomes the leading cause of breaches. This programme covers the shared-responsibility model, cloud IAM, container hardening, Kubernetes security controls from API server to runtime, and continuous posture management — all practised on lab clusters and sandboxed cloud accounts.

Who it's for: Cloud and platform engineers, DevOps/SRE teams, cloud security engineers and architects.

What your team will be able to do

  • ✔Apply least-privilege IAM and guardrails in cloud accounts
  • ✔Build and run hardened containers
  • ✔Secure Kubernetes with RBAC, Pod Security Standards and network policies
  • ✔Manage secrets safely in cloud and Kubernetes
  • ✔Detect runtime threats and continuously assess cloud posture

Advanced course outline

🔒 Session notes & lab guides unlock for enrolled employees
Weekend 1
Weekend 1 · Saturday

Cloud security foundations & IAM

Shared responsibility and identity as the new perimeter.

  • ▸Shared responsibility model
  • ▸IAM policies, roles and least privilege
  • ▸Account structure and guardrails
  • ▸Logging: CloudTrail and equivalents
  • ▸Common cloud breaches and their causes
🧪 Lab: Find and fix IAM over-permissions 🔒 Session notes 🔒 Lab guide
Weekend 1 · Sunday

Cloud network & data protection

Isolation, encryption and storage security.

  • ▸VPC design, security groups and private endpoints
  • ▸Public storage exposure
  • ▸Encryption at rest and key management (KMS)
  • ▸Data residency considerations for financial data
  • ▸Cloud WAF and DDoS protection
🧪 Lab: Close public exposure in a sandbox account 🔒 Session notes 🔒 Lab guide
Weekend 2
Weekend 2 · Saturday

Container security

From Dockerfile to running container.

  • ▸Image provenance and minimal images
  • ▸Running as non-root and read-only filesystems
  • ▸Linux capabilities and seccomp
  • ▸Image scanning and registries
  • ▸Docker daemon exposure risks
🧪 Lab: Break out of — and then harden — a container 🔒 Session notes 🔒 Lab guide
Weekend 2 · Sunday

Kubernetes control plane & RBAC

Securing the cluster itself.

  • ▸Kubernetes architecture and attack surface
  • ▸API server authentication and RBAC
  • ▸Service accounts and token handling
  • ▸CIS Kubernetes benchmark with kube-bench
  • ▸Exposed dashboards and kubelets
🧪 Lab: Audit and fix cluster RBAC 🔒 Session notes 🔒 Lab guide
Weekend 3
Weekend 3 · Saturday

Workload security in Kubernetes

Pod security, network policies and secrets.

  • ▸Pod Security Standards: privileged, baseline, restricted
  • ▸Network policies for east-west traffic
  • ▸Secrets: Kubernetes secrets vs external managers
  • ▸Admission control and policy engines
  • ▸Multi-tenancy considerations
🧪 Lab: Enforce restricted workloads 🔒 Session notes 🔒 Lab guide
Weekend 3 · Sunday

Runtime detection & posture management

Watching clusters and clouds continuously.

  • ▸Runtime detection with Falco
  • ▸Kubernetes audit logs
  • ▸Cloud security posture management
  • ▸Incident response in containers and cloud
  • ▸Capstone architecture review
🧪 Lab: Detect an attack in the cluster 🔒 Session notes 🔒 Lab guide
📝
Final assessment & certificate
Multiple-choice assessment plus attendance requirement → verifiable QR certificate.

Enrol your team in Cloud, Docker & Kubernetes Security

One invoice for the whole team, volume discounts applied automatically.

Register your company → All corporate courses