Cyber Wiki Learning Path
Cloud and Container Security
Secure virtualized, containerized, cloud, and software-defined infrastructure through identity, isolation, configuration, and monitoring.
Recommended Sequence
80 connected entries
AI Connector and Plugin Security
AI connector and plugin security governs integrations that let models read data or act through external applications and services.
AI delivery controls · AdvancedAI Deployment Approval Gates
AI deployment approval gates require defined evidence and accountable authorization before models or AI-enabled features advance into higher-risk environments.
AI assurance engineering · IntermediateAI Evaluation Pipelines
AI evaluation pipelines run repeatable tests against model quality, safety, security, fairness, robustness, and operational requirements.
MLOps security · AdvancedAI Model Serving Security
AI model serving security protects inference endpoints, runtimes, dependencies, model access, scaling, and operational telemetry.
Generative AI application security · IntermediateAI Output Validation
AI output validation treats generated text, code, commands, queries, and structured data as untrusted until the consuming system verifies it.
AI architecture · AdvancedAI Shared-Responsibility Mapping
AI shared-responsibility mapping assigns control duties across model providers, cloud platforms, application teams, data owners, users, and oversight functions.
API security · AdvancedAPI-Based Data Ingestion Security
API-based data ingestion security validates the source, identity, authorization, format, rate, and integrity of data accepted through programmatic interfaces.
Governance practice · IntermediateApplication Security Governance
Application security governance connects engineering work to risk ownership, secure design expectations, delivery controls, exceptions, evidence, and operational accountability.
Software supply chain · AdvancedArtifact Repository Integrity
Artifact repository integrity protects packages, containers, models, and build outputs from unauthorized replacement, deletion, downgrade, or ambiguous reuse.
Secure automation · AdvancedAutomation Blast-Radius Control
Automation blast-radius control limits the systems, accounts, data, regions, and actions a script, pipeline, agent, or remediation job can affect.
Software supply chain · IntermediateAutomation Dependency Pinning
Automation dependency pinning fixes packages, images, modules, actions, and providers to reviewed versions or immutable digests instead of accepting unbounded future changes.
Automation engineering · IntermediateAutomation Idempotency
Automation idempotency means repeated execution against the same desired state produces the same acceptable result without accumulating unintended changes.
Secure automation · IntermediateAutomation Input Validation
Automation input validation verifies type, format, range, origin, authorization, and business rules before data can drive scripts, APIs, templates, or infrastructure changes.
Secure automation · IntermediateAutomation Output Validation
Automation output validation checks that generated files, API responses, model output, commands, and change plans conform to expected structure and permitted effects before downstream use.
Source control security · AdvancedBranch Protection Governance
Branch protection governance enforces review, status checks, signed or attributable changes, restricted force operations, and controlled exceptions on important source branches.
Application security concept · IntermediateBroken Object-Level Authorization
Broken Object-Level Authorization is part of the process used to establish identity, make access decisions, control privileges, or maintain trusted sessions.
Software supply chain · AdvancedBuild Provenance Attestation
Build provenance attestation is verifiable metadata describing what produced an artifact, from which inputs, under what process, and in which build environment.
DevSecOps practice · AdvancedCI/CD Pipeline Security
CI/CD pipeline security protects source, build services, runners, credentials, dependencies, artifacts, approvals, and deployment paths used to deliver software.
Governance practice · AdvancedCloud AI Services Governance
Cloud AI services governance controls how managed machine-learning, generative AI, language, vision, and decision services are selected, configured, and used.
Application architecture · AdvancedCloud API Management
Cloud API management publishes, secures, observes, versions, and governs interfaces used by applications, partners, and services.
Governance structure · IntermediateCloud Account and Resource Hierarchy
Cloud account and resource hierarchies organize tenants, organizations, accounts, subscriptions, projects, folders, resource groups, and resources into manageable administrative boundaries.
Governance framework · IntermediateCloud Adoption Frameworks
Cloud adoption frameworks organize the strategy, people, governance, platform, security, migration, and operations work required to adopt cloud services deliberately.
Assurance practice · AdvancedCloud Audit Evidence
Cloud audit evidence demonstrates how cloud controls are designed and operating through configuration, logs, assessments, access reviews, provider reports, tickets, approvals, and automated test results.
Operational practice · IntermediateCloud Automation and Orchestration
Cloud automation performs repeatable tasks through code and APIs, while orchestration coordinates multiple automated steps into a controlled workflow.
Resilience practice · IntermediateCloud Backup and Recovery
Cloud backup and recovery preserve restorable copies of data, configuration, and system state so services can recover after error, attack, corruption, or loss.
Emergency access control · AdvancedCloud Break-Glass Access
Break-glass access provides a tightly controlled emergency path when normal identity, federation, or administrative mechanisms are unavailable.
Financial control · BeginnerCloud Budgets and Cost Allocation
Cloud budgets and cost allocation connect consumption to accountable teams, products, environments, and business purposes.
Assurance practice · AdvancedCloud Compliance and Assurance
Cloud compliance and assurance map obligations to provider, customer, and shared controls and collect evidence that those controls are designed and operating effectively.
Technology model · BeginnerCloud Computing
Cloud computing delivers configurable computing resources as on-demand services over a network, with rapid provisioning, measured use, and shared provider infrastructure.
Configuration risk · IntermediateCloud Configuration Drift
Cloud configuration drift occurs when deployed resources no longer match approved definitions, baselines, or intended architecture.
Platform security practice · IntermediateCloud Container Security
Cloud container security protects images, registries, orchestrators, nodes, runtime configuration, network policy, secrets, identities, and workloads throughout the container lifecycle.
Security architecture · AdvancedCloud Control Plane Security
The cloud control plane contains the APIs, consoles, identities, and orchestration functions used to create and change cloud resources.
Audit control · IntermediateCloud Control-Plane Logging
Cloud control-plane logging records administrative and API actions that create, change, or delete cloud resources and policies.
Financial monitoring · IntermediateCloud Cost Anomaly Detection
Cloud cost anomaly detection identifies unexpected changes in spend or usage that may indicate waste, configuration errors, abuse, compromise, or legitimate demand changes.
Financial management practice · BeginnerCloud Cost Management
Cloud cost management plans, allocates, monitors, and optimizes consumption-based technology spending while preserving required performance, security, and resilience.
Operating practice · IntermediateCloud Cost Optimization
Cloud cost optimization continually aligns resource configuration, purchasing choices, architecture, and usage with the value a workload delivers.
Cloud identity risk · AdvancedCloud Credential Exposure Paths
Cloud credential exposure paths include source code, build systems, images, logs, metadata services, environment variables, local files, browser sessions, and overprivileged automation.
Availability control · IntermediateCloud DDoS Protection
Cloud distributed-denial-of-service protection combines provider-scale network defenses, traffic filtering, rate controls, resilient architecture, and response procedures.
Data governance practice · IntermediateCloud Data Classification and Discovery
Cloud data classification and discovery identify where sensitive or regulated information exists and apply handling rules according to value, harm, and obligation.
Data governance practice · AdvancedCloud Data Governance
Cloud data governance assigns ownership and rules for classification, access, quality, lineage, retention, location, sharing, and disposal across cloud data services.
Data architecture · IntermediateCloud Data Lakes, Warehouses, and Analytics
Cloud analytics platforms combine object storage, warehouses, catalogs, transformation services, and query engines to process data at scale.
Data governance concept · AdvancedCloud Data Residency and Sovereignty
Data residency concerns where data is stored or processed, while data sovereignty concerns the legal authority that may apply to that data and its providers.
Audit and detection control · AdvancedCloud Data-Access Logging
Cloud data-access logging records reads, writes, deletes, queries, exports, and sharing actions involving stored or managed data.
Architecture and data-protection practice · AdvancedCloud Data-Plane Security
Cloud data-plane security protects the operations that read, write, process, transmit, and delete workload and business data after cloud resources have been configured.
Data security practice · IntermediateCloud Database Security
Cloud database security protects managed and self-managed data stores through identity, network access, encryption, configuration, auditing, backup, patching, and data governance.
Cloud service concept · IntermediateCloud Database Services
Cloud database services provide relational, key-value, document, graph, cache, and other data models with varying levels of provider management.
Cloud concept · BeginnerCloud Deployment Models
Cloud deployment models describe how cloud infrastructure is owned, shared, located, and connected across public, private, community, and hybrid environments.
Financial concept · BeginnerCloud Economics and Consumption Pricing
Cloud economics links metered consumption, pricing models, operating flexibility, and business value to technology decisions.
Architecture concept · IntermediateCloud Edge Computing
Cloud edge computing places processing, caching, networking, or service delivery closer to users, devices, or data sources than a central cloud region.
Cloud service concept · IntermediateCloud Edge Services and Content Delivery
Cloud edge services place content, acceleration, routing, filtering, or application functions closer to users and devices.
Network security control · AdvancedCloud Egress Control
Cloud egress control limits and monitors outbound communication from workloads, users, and services to reduce exfiltration, command-and-control, and unauthorized dependency risk.
Architecture concept · BeginnerCloud Elasticity and Scalability
Scalability is the ability to support increased demand by adding capacity, while elasticity is the ability to adjust that capacity quickly as demand changes.
Resilience and supplier-management practice · AdvancedCloud Exit Planning
Cloud exit planning defines how an organization can move, replace, or retire cloud services while preserving data, evidence, continuity, security, and legal obligations.
Architecture practice · AdvancedCloud Fault Tolerance
Cloud fault tolerance enables a system to continue performing required functions when components or dependencies fail.
Forensic practice · AdvancedCloud Forensics
Cloud forensics collects and analyzes provider logs, snapshots, object versions, identity records, network evidence, and service metadata for investigation.
Governance practice · IntermediateCloud Governance
Cloud governance establishes decision rights, policies, ownership, guardrails, evidence, and review processes for using cloud services in line with business and risk objectives.
Governance practice · IntermediateCloud Governance with Tags, Policies, and Resource Locks
Cloud tags, policies, and locks organize resources, enforce requirements, assign ownership, and prevent unauthorized or accidental change.
Preventive and detective control · IntermediateCloud Guardrails
Cloud guardrails are centrally defined controls that prevent, constrain, detect, or remediate unsafe configurations while allowing teams to work within approved boundaries.
Architecture practice · IntermediateCloud High Availability
Cloud high availability uses redundant components, failure isolation, health detection, and automated recovery to keep a service accessible despite expected faults.
Network architecture · AdvancedCloud Hybrid Connectivity
Hybrid connectivity joins cloud environments with data centers, offices, edge locations, or other providers through VPNs, dedicated links, and routing services.
Cloud authorization practice · AdvancedCloud IAM Policy Analysis
Cloud IAM policy analysis evaluates effective permissions, conditions, inheritance, wildcard use, trust relationships, resource scope, and paths to privilege escalation.
Cloud architecture assurance practice · AdvancedCloud Identity Boundary Validation
Cloud identity boundary validation tests whether accounts, subscriptions, projects, tenants, organizations, roles, and trust relationships enforce the intended separation of duties and blast radius.
Identity architecture · IntermediateCloud Identity Federation
Cloud identity federation allows an external identity provider to authenticate users or workloads and provide trusted assertions or tokens to cloud services.
Cloud security practice · IntermediateCloud Identity and Access Management
Cloud identity and access management governs human and workload access to provider consoles, APIs, resources, data, secrets, and administrative functions.
Software supply-chain control · IntermediateCloud Image Security
Cloud image security protects virtual-machine and container images from vulnerable packages, malware, embedded secrets, untrusted changes, and unauthorized distribution.
Response practice · AdvancedCloud Incident Response
Cloud incident response adapts preparation, detection, containment, eradication, and recovery to provider APIs, elastic resources, managed services, and shared responsibility.
Cloud workload security practice · AdvancedCloud Instance Metadata Security
Cloud instance metadata security protects workload identity and configuration services that can expose temporary credentials or sensitive context to code running on a compute resource.
Security operations practice · IntermediateCloud Vulnerability Management
Cloud vulnerability management identifies, prioritizes, and reduces exploitable weaknesses across images, hosts, containers, functions, applications, libraries, services, and configuration.
Security capability · AdvancedCloud Workload Protection
Cloud workload protection applies preventive and detective controls to virtual machines, containers, serverless functions, and managed compute environments.
Container security · IntermediateContainer Network Security
Container network security controls service exposure, east-west communication, port publishing, name resolution, administrative planes, and traffic policy across container hosts and clusters.
Software supply chain practice · AdvancedContainer Registry and Image Security
Container image security protects the build, storage, distribution, approval, and use of container images.
Container security · IntermediateContainer Runtime Isolation
Container runtime isolation constrains containers through namespaces, cgroups, capabilities, syscall controls, user separation, and hardened runtime configuration rather than assuming an image boundary is sufficient.
Cloud security concept · IntermediateContainer Runtime Security
Container Runtime Security is a cybersecurity concept used to describe, protect, analyze, or operate an important part of a modern information environment.
Container security · IntermediateContainer Volume Security
Container volume security protects persistent and host-mounted data by controlling ownership, labels, mount modes, secret placement, backup behavior, and the host paths a workload may reach.
Deployment pattern · AdvancedImmutable Infrastructure
Immutable infrastructure replaces deployed components with newly built versions instead of modifying them in place.
Platform security practice · AdvancedKubernetes Security
Kubernetes security protects the cluster control plane, nodes, workloads, images, network paths, secrets, and administrative interfaces.
Service management · IntermediatePCI Cloud Scoping
PCI cloud scoping identifies payment-data flows, cloud resources, management planes, identities, services, providers, regions, logging, and shared responsibilities that store, process, transmit, or affect account-data security.
Network architecture concept · AdvancedSASE, SD-WAN, and Software-Defined Networking
SASE, SD-WAN, and software-defined networking separate policy and control from traditional appliances, enabling distributed connectivity and security while increasing dependence on identity, orchestration, and provider controls.
Virtualization security · IntermediateVirtual Machine Snapshot Security
Virtual machine snapshot security governs point-in-time state copies that may contain memory, credentials, sensitive data, vulnerable software, and configuration that later returns during rollback.
Platform concept · IntermediateVirtualization and Containers
Virtualization and containers isolate workloads and share underlying resources through hypervisors, operating-system controls, images, and orchestration platforms.