Cybersecurity EngineerIntermediate6 modules~3.0 hours hands-on3 learning modes
Cloud, Container & Kubernetes Security
Harden images and Kubernetes workloads with non-root execution, least-privilege identity, network policy, admission controls, and observable runtime boundaries.
// What you'll be able to do- Minimal, reproducible images and non-root execution
- Short-lived identity and namespace-scoped permissions
- Default deny, intentional egress, and protected secret delivery
- Prevent unsafe specs before scheduling and observe drift after
6 modules, built to run
Every module ships runnable code. Expand any one to see what's inside.
00IntroductionContainers share a kernel; orchestration expands the control plane30 min
Objective — Containers share a kernel; orchestration expands the control plane
Start moduleFree preview
01Images & Runtime BoundariesMinimal, reproducible images and non-root execution30 min
Objective — Minimal, reproducible images and non-root execution
02Workload Identity & RBACShort-lived identity and namespace-scoped permissions30 min
Objective — Short-lived identity and namespace-scoped permissions
03Network & Secret BoundariesDefault deny, intentional egress, and protected secret delivery30 min
Objective — Default deny, intentional egress, and protected secret delivery
04Admission & Runtime DetectionPrevent unsafe specs before scheduling and observe drift after30 min
Objective — Prevent unsafe specs before scheduling and observe drift after
05Pattern SynthesisBuild and verify a local workload policy30 min
Objective — Build and verify a local workload policy
Ready to start Cloud, Container & Kubernetes Security?
Start with the free Module 0, then unlock the full course on a Pro plan.