Public Cloud Security

• General knowledge of IaaS vendors
• Experience with FortiGate and Linux VMs
• Completion of the NSE6 Cloud Security for AWS and NSE 6 Cloud Security for Azure courses or a clear understanding of network components and how to deploy resources in Azure

AWS Prerequisites Labs: students must have own account with:

• A valid payment method registered on the account*
• Capacity for at least four elastic IPs and 15 vCPUs in a single region
• Capacity to deploy FortiGate HA with 10 or more network interfaces
• Permissions to create the following:
  • Minimum 6 VPCs and 10 EC2 instances
  • S3 bucket
  • CloudShell
  • Security groups
  • Internet and Transit gateways
  • Lambda functions
  • IAM users with AWSMarketplaceFullAccess, AmazonEC2FullAccess permissions

Azure Prerequisites Labs: students must have own account with:

• Pay-as-you-go subscription with valid payment method*
• Ability to deploy FortiGate from Azure Marketplace and Terraform
• Capacity for at least 15 vCPUs in a single region
• Capacity to deploy FortiGate HA with 10 or more network interfaces
• Permissions to create the following:
  • App registrations (service principal) and keys
  • Minimum 6 VNets
  • Minimum 7 VMs with 15 vCPUs
• The ability to do the following:
  • Run Cloud Shell with storage setup
  • Read the Active Directory properties and use Azure functions
  • IAM user with contributor, owner, and user access administrator role permissions

*Estimated lab cost/student, following all instructions, is USD $10/cloud vendor/day. Free trial will not work for some exercises.