Skip to content
EDWartens UK

Free course · Cybersecurity

Cloud Security Fundamentals: AWS and Azure

Secure what you run in AWS and Azure: the shared responsibility model, AWS IAM and Microsoft Entra ID with Conditional Access, zero trust, network security groups and private endpoints, encryption and key management, and posture management with Defender for Cloud and Sentinel.

See the modules

Free to learn. Verifiable certificate £19 when you pass the final exam (optional, VAT included).

Level
Beginner
Modules
9
Video
9 hours
Price
Free

Outcome

What you will be able to do

Explain what cloud security covers and how it differs from on-premises; apply the shared responsibility model to IaaS, PaaS and SaaS; write least-privilege AWS IAM policies and predict how they are evaluated; design Microsoft Entra ID Conditional Access policies without locking out the tenant; apply zero trust principles to cloud access; configure network security groups, service endpoints and private endpoints; choose encryption and key management options; and run a posture management and monitoring loop across AWS and Azure.

  • Explain what cloud security covers and how it differs from on-premises
  • Apply the shared responsibility model to IaaS, PaaS and SaaS
  • Write least-privilege AWS IAM policies and predict how they are evaluated
  • Design Entra ID Conditional Access policies without locking out the tenant
  • Apply zero trust principles to cloud and administrator access
  • Configure NSGs, service endpoints and private endpoints
  • Choose encryption and key management options in Azure and AWS
  • Run posture management and monitoring with Defender for Cloud, Sentinel and AWS tools

Software

A web browser. An AWS Free Tier account and an Azure free account are optional but recommended for the practice tasks.

Hardware

None.

Syllabus

9 modules

Each module has video lessons, notes and a short quiz. The final exam closes the course.

  1. 1What cloud security is2 lessons
  2. 2The shared responsibility model3 lessons
  3. 3Identity first: AWS IAM2 lessons
  4. 4Identity in Azure: Entra ID and conditional access2 lessons
  5. 5Zero trust for the cloud3 lessons
  6. 6Network controls in the cloud2 lessons
  7. 7Encryption and key management1 lesson
  8. 8Threats, posture management and monitoring3 lessons
  9. 9Final Assessment1 lesson

How it works

How this course works

  1. Watch the video lessonsOne module at a time, at your own pace.
  2. Take the module quizA short quiz at the end of each module shows what stuck.
  3. Keep your notesWrite in My notes beside each module and ask the trainer if you are stuck.
  4. Sit the final examPass it once you have been through the modules.
  5. Certificate, if you want oneOptionalPaid, and only after you pass. Anyone can check it online.

Certificate

An optional certificate when you pass

Learning is free. Pass the final exam and you can have a certificate for £19, including VAT, with a number employers can check online. It records that you completed a free online course; it is not a regulated qualification or a CPD certificate.

  • Your name, the course, its study time and your final exam score
  • A unique certificate number and a QR code to its verification page
  • Issued by Wartens Ltd; add it to your LinkedIn profile in one click
  • Pay now or after you pass: it is issued the moment you pass the final

How the certificate works

Sample certificate for Cloud Security Fundamentals: AWS and Azure

Credits

Who made the lessons

The video lessons belong to their creators. EDWartens wrote the study plan, notes, quizzes and the final exam.

  • John Savill's Technical Training

    the Azure lessons on Azure AD (now Microsoft Entra ID), Conditional Access, network security groups, virtual network and PaaS network controls, storage and disk encryption, Defender for Cloud and Sentinel, and the closing top five security tips

  • IBM Technology

    the explainers on what cloud security is, zero trust, the cloud threat landscape and multicloud security

  • Amazon Web Services

    the AWS lessons on compliance and the shared responsibility model

  • Amitabh Soni

    the lesson on AWS IAM best practices

  • BeSA Cloud Academy

    the beginner's lesson on the AWS shared responsibility model

  • KodeKloud

    the lesson on AWS security, the shared responsibility model, compliance and IAM

  • Tiny Technical Tutorials

    the lesson on AWS Identity and Access Management basics

Questions

About this course

Who is this course for?
IT administrators, developers, support engineers and students who look after, or want to look after, workloads in AWS and Azure. No cloud certification is needed.
Is this an AWS or Microsoft course?
No. It uses lessons that Amazon Web Services, John Savill, IBM Technology and other educators publish free on YouTube, credited on each module. AWS and Azure are trademarks of Amazon and Microsoft, and neither company is affiliated with EDWartens.
Does it prepare me for a cloud security certification?
Not directly. It covers the fundamentals that vendor exams such as Microsoft's SC-500 (which replaced AZ-500 when AZ-500 retired on 31 August 2026) and AWS Certified Security - Specialty build on, but it is not exam preparation for either, and the EDWartens certificate is not a vendor certification.
Do I need to pay for AWS or Azure?
No. The practice tasks fit inside the AWS Free Tier and an Azure free account. Switch off anything you create when you finish, and set a budget alert so nothing is charged by surprise.
Is the course really free?
Yes. Every module, the notes, the project and the final assessment. The only paid item is the certificate, if you want it.
What certificate do I get?
An EDWartens Certificate of Completion, issued when you pass the final assessment, with a number anyone can verify on our site.
How long does the course take?
About 8.7 hours of video lessons, notes and practice questions, plus about 10 hours if you do the project. At an hour a day, that is about three weeks.
What is the project?
You review the AWS and Azure estate of a logistics software company as its first cloud security engineer. You write an asset inventory, a risk register, an identity and access baseline for AWS and Entra ID, and a posture report the CTO can use to answer a customer's security questionnaire.

The Professional Module is five live days of Siemens PLC, HMI and SCADA with an instructor, then a resume session and a CPD certificate.

See the Professional Module