Certified Kubernetes Security Specialist Masterclass 2023
What you'll learn
- Use Network security policies to restrict cluster level access
- Use CIS benchmark to review the security configuration of Kubernetes components (etcd, kubelet, kubedns, kubeapi)
- Properly set up Ingress objects with security control
- Protect node metadata and endpoints
- Minimize use of, and access to, GUI elements
- Verify platform binaries before deploying
- Restrict access to Kubernetes API
- Use Role Based Access Controls to minimize exposure
- Exercise caution in using service accounts e.g. disable defaults, minimize permissions on newly created ones
- Update Kubernetes frequently
- Minimize host OS footprint (reduce attack surface)
- Minimize IAM roles
- Minimize external access to the network
- Appropriately use kernel hardening tools such as AppArmor, seccomp
- Setup appropriate OS level security domains
- Manage Kubernetes secrets
- Use container runtime sandboxes in multi-tenant environments (e.g. gvisor, kata containers)
- Implement pod to pod encryption by use of mTLS
- Minimize base image footprint
- Secure your supply chain: whitelist allowed registries, sign and validate images
- Use static analysis of user workloads (Kubernetes resources, Docker files)
- Scan images for known vulnerabilities
- Perform behavioral analytics of syscall process and file activities at the host and container level to detect malicious activities
- Detect threats within physical infrastructure, apps, networks, data, users and workloads
- Detect all phases of attack regardless where it occurs and how it spreads
- Perform deep analytical investigation and identification of bad actors within environment
- Ensure immutability of containers at runtime
- Use Audit Logs to monitor access
Requirements
- Must know the basics of Kubernetes
- Must have some hands on experience of Kubernetes
- Ideally CKA or CKAD certified as that is also a prerequisite to take the CKS Exam
Description
Cluster Setup
Use Network security policies to restrict cluster level access
Use CIS benchmark to review the security configuration of Kubernetes components (etcd, kubelet, kubedns, kubeapi)
Properly set up Ingress objects with security control
Protect node metadata and endpoints
Minimize use of, and access to, GUI elements
Verify platform binaries before deploying
Cluster Hardening
Restrict access to Kubernetes API
Use Role Based Access Controls to minimize exposure
Exercise caution in using service accounts e.g. disable defaults, minimize permissions on newly created ones
Update Kubernetes frequently
System Hardening
Minimize host OS footprint (reduce attack surface)
Minimize IAM roles
Minimize external access to the network
Appropriately use kernel hardening tools such as AppArmor, seccomp
Minimize Microservice Vulnerabilities
Setup appropriate OS level security domains
Manage Kubernetes secrets
Use container runtime sandboxes in multi-tenant environments (e.g. gvisor, kata containers)
Implement pod to pod encryption by use of mTLS
Supply Chain Security
Minimize base image footprint
Secure your supply chain: whitelist allowed registries, sign and validate images
Use static analysis of user workloads (e.g.Kubernetes resources, Docker files)
Scan images for known vulnerabilities
Monitoring, Logging and Runtime Security
Perform behavioral analytics of syscall process and file activities at the host and container level to detect malicious activities
Detect threats within physical infrastructure, apps, networks, data, users and workloads
Detect all phases of attack regardless where it occurs and how it spreads
Perform deep analytical investigation and identification of bad actors within environment
Ensure immutability of containers at runtime
Use Audit Logs to monitor access
Who this course is for:
- Anyone wishing to learn about Kubernetes Security or want to pass the CKS Exam
Instructor
- 3.9 Instructor Rating
- 540 Reviews
- 36,508 Students
- 9 Courses
Highly Skillful, Knowledgeable and Result-Driven IT Professional with over 20 years of Experience (Totally Hands-on).
AWS Cloud Architecture, Design, Development, DevOps, SysOps - EC2, ECS, EKS, Elastic Beanstalk, Lambda, S3, Glacier, Storage Gateway, RDS, DynamoDB, ElastiCache, Redshift, VPC, ELB, Route 53, CloudWatch, CloudFormation, CloudTrail, OpsWorks, Elastic MapReduce, Kinesis, Data Pipeline, SWF, SQS, SNS, SES
Big Data Engineering - Hadoop, HDFS, YARN, Hive, Spark, Kafka, MongoDB, HBase, Cassandra, Storm, ZooKeeper, Redis, Elastisearch, Logstash, Kibana, Grafana
Data Science, Machine Learning, AI, Python, TensorFlow, Natural Language Processing
Java/Java EE/Web/Web Services, Spring, Spring MVC, Microservices, RESTful API, Spring Boot, Hibernate Development
Full Stack Development experience using MERN (MongoDB, Express, ReactJS, Node) Stack. Proficient with Angular, HTML5, CSS3, Bootstrap, Ant Design
DevOps - Kubernetes, Docker, Jenkins, Maven, Gradle, GIT, JIRA, Terraform, Puppet, Chef, Ansible, Prometheus
Google Cloud Platform - Cloud SQL, Datastore, Bigtable, Cloud Spanner, Cloud Dataflow, Dataproc, BigQuery, AI Platform, Datalab, Dataprep, Data Studio, Cloud Composer
I hold 50+ Internationally recognized Professional Certifications listed as below:-
Amazon Web Services (9X Certified)
AWS Certified Solutions Architect - Professional
AWS Certified DevOps Engineer - Professional
AWS Certified Machine Learning - Specialty
AWS Certified Security - Specialty
AWS Certified Advanced Networking - Specialty
AWS Certified Data Analytics - Specialty
AWS Certified Database - Specialty
Google Cloud Certified Professional Machine Learning Engineer
TensorFlow Developer Certificate
Google Cloud Certified Professional Data Engineer
Microsoft Azure
Microsoft Certified: Azure Solutions Architect Expert
Microsoft Certified: Azure AI Engineer Associate
Big Data
Elasticsearch, Logstash, Kibana Certified Engineer
Cloudera Certified Associate (CCA) Spark and Hadoop Developer
Confluent Certified Developer For Apache Kafka
Confluent Certified Operator for Apache Kafka
DevOps
Certified Kubernetes Application Developer
Certified Kubernetes Administrator
Docker Certified Associate
Certified Jenkins Engineer 2018
Python
Certified Python Associate
Java
OCP Java SE 6 & 8 Programmer
SOA and Web Services
Oracle SOA Suite 12c Certified Implementation Specialist
Oracle Certified Expert, Java EE 6 Web Services Developer
Security
CISSP & CISM
Enterprise Architecture and Management
TOGAF 9 Certified, PRINCE2 and ITIL