Cloud, Coffee & Certs - My Cloud Security Journey with You

In this episode, I talked about Mongobleed Vulnerability CVE-2025-14847, Cloud Security, and AI, with a first overview on AWS Certified Advanced Networking - Specialty.

Show Notes - https://technokofe.com/ccc-s2-e18-mongobleed-cve-2025-14847-cloud-security-and-ai/

🌟 Unlock the Power of the Cloud! 🚀

Join us for an exhilarating new season focused on mastering cloud computing and AWS security. This series will cover essential certification topics, provide expert insights, and offer hands-on practices to enhance your skills each week.

This program is tailored for novices or those seeking to deepen their un...

In this episode, I discussed the discontinuation of the AWS Certified Security Specialty Certification and what lies ahead for us.

Show Notes - https://technokofe.com/gct-s2-e17-aws-security-specialty-is-discontinued-happy-new-year/

🌟 Unlock the Power of the Cloud! 🚀

Join us for an exhilarating new season focused on mastering cloud computing and AWS security. This series will cover essential certification topics, provide expert insights, and offer hands-on practices to enhance your skills each week.

This program is tailored for novices or those seeking to deepen their understanding of the subject. For additional information and resources to aid...

🌟 Unlock the Power of the Cloud! 🚀

Join us for an exhilarating new season focused on mastering cloud computing and AWS security. This series will cover essential certification topics, provide expert insights, and offer hands-on practices to enhance your skills each week.

In this episode, I started domain 4 for the AWS Security specialty examination, covering authentication basics using the AWS IAM Service. Next week, we will delve deeper into authentication and incorporate authorization as well.

This program is tailored for novices or those seeking to deepen their understanding of the subject. For additional information and res...

🌟 Unlock the Power of the Cloud! 🚀

Join us for an exhilarating new season focused on mastering cloud computing and AWS security. This series will cover essential certification topics, provide expert insights, and offer hands-on practices to enhance your skills each week.

In this episode, I planned out which domain to cover first for our journey and what should we target in next one month.

This program is tailored for novices or those seeking to deepen their understanding of the subject. For additional information and resources to aid your learning journey, please visit https://www.tech...

🌟 Unlock the Power of the Cloud! 🚀

Join us for an exhilarating new season focused on mastering cloud computing and AWS security. This series will cover essential certification topics, provide expert insights, and offer hands-on practices to enhance your skills each week.

In this episode, I cover topics such as the Performance, Cost Optimization, and Sustainability pillars of the Well-Architected Framework, including modules from the AWS Well-Architected Framework —a free resource with fantastic content to kickstart your AWS security professional journey.

This program is tailored for novices or those seeking to deepen their understanding of the su...

🌟 Unlock the Power of the Cloud! 🚀

Join us for an exhilarating new season focused on mastering cloud computing and AWS security. This series will cover essential certification topics, provide expert insights, and offer hands-on practices to enhance your skills each week.

In this episode, I cover topics such as the Security and Reliability pillar of the Well-Architected Framework, including modules from the AWS Well-Architected Framework, a free resource with fantastic content to kickstart your AWS security professional journey.

Show Notes - https://technokofe.com/2025/09/13/gct-s2-e12-security-and-reliability-aws-well-architected-framework/

This program is tailored for nov...

🌟 Unlock the Power of the Cloud! 🚀

Join us for an exhilarating new season focused on mastering cloud computing and AWS security. This series will cover essential certification topics, provide expert insights, and offer hands-on practices to enhance your skills each week.

In this episode, I cover topics such as recertification of Security+ and the operational excellence pillar of the Well-Architected Framework, including modules from the AWS Well-Architected Framework, a free resource with fantastic content to kickstart your AWS security professional journey.

Show Notes - https://technokofe.com/2025/06/26/gct-s2-e11-comptia-security-recertification-and-awss-operational-excellence-pillar/

This program...

🌟 Unlock the Power of the Cloud! 🚀

Join us for an exhilarating new season focused on mastering cloud computing and AWS security. This series will cover essential certification topics, provide expert insights, and offer hands-on practices to enhance your skills each week.

In this episode, I cover topics such as Design principles and pillars of Well Architected framework, from Well-Architected Framework Modules by AWS, a free resource with fantastic content to kickstart your AWS security professional journey.

Show Notes - https://technokofe.com/2025/06/12/gct-s2-e10-aws-well-architected-framework-overview/

This program is tailored for novices or thos...

🌟 Unlock the Power of the Cloud! 🚀

Join us for an exhilarating new season focused on mastering cloud computing and AWS security. This series will cover essential certification topics, provide expert insights, and offer hands-on practices to enhance your skills each week.

In this episode, I cover topics such as Logging using CloudTrail, CloudWatch, Security Hub, and Incident response from Security Fundamentals by AWS, which is free and has fantastic content to kickstart the AWS security professional journey.

Show Notes - https://technokofe.com/2025/05/18/gct-s2-e9-aws-security-fundamentals/

<...

🌟 Unlock the Power of the Cloud! 🚀

Join us for an exhilarating new season focused on mastering cloud computing and AWS security. This series will cover essential certification topics, provide expert insights, and offer hands-on practices to enhance your skills each week.

In this episode, I am covering topics such as AWS DCs perimeter security, Regions & availability zones, and Identity & Access Management from Security Fundamentals by AWS, which is free and has fantastic content to kickstart the AWS security professional journey.

Show Notes - https://technokofe.com/2025/04/13/gct-s2-e8-bas...

🌟 Unlock the Power of the Cloud! 🚀

Join us for an exhilarating new season focused on mastering cloud computing and AWS security. This series will cover essential certification topics, provide expert insights, and offer hands-on practices to enhance your skills each week.

In this episode, I am having a chat on Security Fundamentals by AWS, which is free and has amazing content to kickstart AWS security professional journey.

Show Notes - https://technokofe.com/2025/04/03/gct-s2-e7-security-fundamentals-by-aws-its-free/

This program is tailored for novices or thos...

🌟 Unlock the Power of the Cloud! 🚀

Join us for an exhilarating new season focused on mastering cloud computing and AWS security. This series will cover essential certification topics, provide expert insights, and offer hands-on practices to enhance your skills each week.

In this episode, I am having a chat on why ISC2 audited my CPE Portal and SCS-C02 Mock exam.

Show Notes - https://technokofe.com/2025/03/13/gct-s2-e6-why-isc2-audited-my-cpe-portal-and-scs-c02-mock-exam/

This program is tailored for novices or those seeking to deepen their u...

🌟 Unlock the Power of the Cloud! 🚀

Join us for an exhilarating new season focused on mastering cloud computing and AWS security. This series will cover essential certification topics, provide expert insights, and offer hands-on practices to enhance your skills each week.

In this episode, I am having a walkthrough of the syllabus from the Official Study Guide, covering Domains 4,5, & 6 of the exam.

Show Notes - https://technokofe.com/2025/03/02/gct-s2-e5-walkthrough-in-domain-45-6-from-aws-sec-syllabus/

This program is tailored for novices or those seeking to deepen their underst...

🌟 Unlock the Power of the Cloud! 🚀

Join us for an exhilarating new season focused on mastering cloud computing and AWS security. This series will cover essential certification topics, provide expert insights, and offer hands-on practices to enhance your skills each week.

In this episode, I am having a walkthrough of the syllabus from the Official Study Guide, covering Domains 12 & 3 of the exam.

Show Notes - https://technokofe.com/2025/02/18/gct-s2-e4-walkthrough-in-domain-2-3-from-aws-sec-syllabus/

This program is tailored for novices or those seeking to deepen their underst...

🌟 *Unlock the Power of the Cloud! 🚀* 

In this episode, Dev and Zhihao discuss the evolving field of cybersecurity, focusing on time management for professionals balancing multiple roles. They analyze significant data breaches, including Volkswagen's data leak, and explore the complexities of securing Kubernetes environments. The conversation also covers vulnerability management, patching strategies, and integrating security practices early in development. Zhihao shares valuable resources for aspiring cybersecurity professionals and emphasizes the need for continuous learning in this dynamic field.

Show Notes - https://technokofe.com/2025/02/09/gct-s2-e3-monthly-digest-zhi-haos-view-on-improving-cloud-security-paradigm/

🌟 Unlock the Power of the Cloud! 🚀

Join us for an exhilarating new season focused on mastering cloud computing and AWS security. This series will cover essential certification topics, provide expert insights, and offer hands-on practices to enhance your skills each week.

In this episode, I am having a walkthrough of the syllabus from the Official Study Guide, covering Domain 1 of the exam.

This program is tailored for novices or those seeking to deepen their understanding. For additional information and resources to aid your learning journe...

🌟 **Unlock the Power of the Cloud! 🚀**

Join us for an exhilarating new season focused on mastering cloud computing and AWS security. This series will cover essential certification topics, provide expert insights, and offer hands-on practices to enhance your skills each week. Whether you are a novice or seeking to deepen your understanding, this program is tailored for you.

Season 1

Season 2

For additional information and resour...

I am certified as a Certified Cloud Security Professional (CCSP) after clearing the exam by ISC2 on 3rd Dec. In this episode, I shared my experience of the day exam

For resources, refer to the show notes at https://technokofe.com/2024/12/26/get-certified-together-episode-52/

I am certified as a Certified Cloud Security Professional (CCSP) after clearing the exam by ISC2 on 3rd Dec. In this episode, I shared my final sprint, till a day before the exam by sharing books I referred to during this period.

For resources, refer to the show notes at https://technokofe.com/2024/12/05/get-certified-together-episode-51/

In this episode, I discussed Understanding the Implications of the Cloud to Enterprise Risk Management, and Understand Outsourcing and Cloud Contract Design.

This brings the end of the season for CompTia and CCSP. We will come again in Season 2 of this series, with amazing content.

In this episode, I discussed the recent gap in our podcast and what lies ahead for us after finishing CCSP.

In the next episode, I will cover Understanding the Implications of the Cloud to Enterprise Risk Management, and Understand Outsourcing and Cloud Contract Design.

Twitter (X) - @dev_lops

In this episode, I discussed the sub-topics of Domain 6, Understanding Privacy Issues & Audit Processes.

I discussed Audit Planning, ISMS, Policies, Distributed IT, Identification and Involvement of Relevant Stakeholders, etc.

In the next episode, I will cover Understanding the Implications of the Cloud to Enterprise Risk Management, and Understand Outsourcing and Cloud Contract Design.

Twitter (X) - @dev_lops

In this episode, I discussed the sub-topics of Domain 6, Understanding Privacy Issues & Audit Processes.

I discussed the contractual and Regulated Private Data, Standard Privacy Requirements, Internal and External Audit Controls, Gap Analysis, etc.

Next week, I will cover Internal Information Security Management Systems, Policies (e.g., organizational, functional, cloud computing), etc.

Twitter (X) - @dev_lops

In this episode, I discussed the first topic of Domain 6, Legal, Risk and Compliance

I discussed about the  Legal Risks with Cloud, Framework & Guidelines, E-Discovery

Next week, I will cover Understanding of Privacy Issues.

Twitter (X) - @dev_lops

ISC2 Thames Valley Chapter Event - https://www.eventbrite.co.uk/e/leveraging-docker-for-security-tickets-864413803957?utm-campaign=social&utm-content=attendeeshare&utm-medium=discovery&utm-term=listing&utm-source=cp&aff=ebdsshcopyurl

In this episode, I discussed various topics of Cloud Security operations.

I discussed about the Digital Forensics, and Communication strategies respective to different stakeholders.

Next week, I will start the last domain of CCSP, Legal, Risk & Compliance.

Twitter (X) - @dev_lops

Disclaimer - Because of slightly more background noise in the main episode, I inserted a calming background score for comfortable listening.

In this episode, I discussed various topics of Cloud Security operations.

I discussed about Configuration Management, ISM, Release Management, Business Continuity, and Service Level Agreements.

Next week, I will cover the next topic of Domain 5, Digital Forensics, SIEM, IDS, IPS, etc.

In this episode, I discussed various topics of Cloud Security operations.

I discussed about IDS, IPS, Patch management, and Backup and restore, Management & Orchestration.

Next week, I will cover the next topic of Domain 5, Change Management, Compliances, etc.

GCT Slack Channel - https://join.slack.com/t/getcertifiedtogether/shared_invite/zt-29zd73gdd-3aQ1DyyjVe3Y5mbHF0KiSA

In this episode, I discussed various topics of Cloud Security operations.

I discussed about DHCP, Stand-Alone and Clustered Hosts, Dynamic Resource Sharing, Security Hardening, and Optimisation.

Next week, I will cover the next topic of Domain 5, Cloud Security operations, IDS, IPS, Backup, Restore Strategies, etc.

In this episode, I discussed various topics of Cloud Security operations.

I discussed about Virtualisation Management tools, Network segmentation, Remote and local access via console, TLS, IPSEC, etc.

Next week, I will cover the next topic of Domain 5, Cloud Security operations, Configuration Management, Security Hardening, Patching, etc.

In this episode, I discussed about my experience with the Certified in Cyber Security Exam and some more topics of Cloud Security Operations.

I discussed Network and Storage Controllers, TPM, OOB Networks, and TPM.

Next week, I will cover the next topic of Domain 5, Cloud Security operations, Virtualisation Management Tools, Configuration management, etc.

Visit my website > www.technokofe.com and drop IM from Contact us, for queries on CC.

In this episode, I covered sub-topics from Domain 4 and started Domain 5 of the CCSP exam.

I discussed IAM, Federated Identity, SSO, and HVAC, different tiers of Data centers.

Next week, I will cover the next topic of Domain 5, Cloud Security operations.

In this episode, I covered sub-topics from Domain 4 of the CCSP exam.

I discussed Sandboxing, Supplement services for Cloud App Security, and Open source.

Next week, I will end Domain 4 with IAM, and begin Domain 5, Cloud Security operations.

In this episode, I covered sub-topics from Domain 4 of the CCSP exam.

I discussed the Secure Software Development Lifecycle, Cloud Specific Risks, Quality Assurance, and Threat Modeling.

Next week, I will continue with Domain 4, covering topics for Specifics of Cloud App Framework, OpenSource SW, and Secure Supply Chain.

YouTube - https://www.youtube.com/channel/UC5ut2wBRXrzkn5fqMS4iYQw

In this episode, I covered sub-topics from Domain 4 of the CCSP exam.

I discussed the building blocks of Cloud Application deployment, Software Delivery Life Cycle, and Cloud Application pitfalls, with OWASP's Top 10 web app vulnerabilities.

Next week, I will continue with Domain 4, covering topics for Cloud Specific risks with application, Strategies for security in the Software development lifecycle, Quality Assurance, etc.

In this episode, I covered sub-topics from Domain 3 of the CCSP exam.

I discussed the Strategies for Cloud Infra Security, Risk Audit Mechanism, BC DR, and KCNA Certification result.

Next week, I will start Domain 4, Cloud Application Security.

In this episode, I covered sub-topics from Domain 3 of the CCSP exam.

I discussed the Strategies for Cloud Infra Security and ISC2 membership.

Next week, I will continue the Strategies for Cloud Security Control.

My Meetup group - https://www.meetup.com/just-another-group-of-tech/

ISC2 - https://www.isc2.org/ (Sign if for a new account and Register for the Exam for Membership)

In this episode, I covered sub-topics from Domain 3 of the CCSP exam.

I discussed the Risk Analysis of Cloud Infrastructure.

Next week, I will cover the Design and Plan for Cloud Security Control.

In this episode, I covered sub-topics from Domain 3 of the CCSP exam.

I discussed Different Cloud Infrastructure Components.

Next week, I will cover the Risk Analysis of Cloud Infrastructure.

In this episode, I covered sub-topics from Domain 2 of the CCSP exam.

I discussed the Event Management system for Secure Data Lifecycle.

Next week, I will cover the first topic of Domain 3, Cloud Infra Security.

In this episode, I covered sub-topics from Domain 2 of the CCSP exam.

I discussed Data Classification and Data Deletion

In the next week, I will cover the last topic of Domain 2, Data Events and Auditability.

In this episode, I covered sub-topics from Domain 2 of the CCSP exam.

I discussed Data Masking, Tokenization, and Data Discovery.

In the next week, I will cover the next topic of Secure Data Lifecycle: Data Classification.

In this episode, I covered sub-topics from Domain 2 of the CCSP exam.

I discussed Data Loss Prevention (DLP) and Encryption in the Cloud.

In the next week, I will cover various other Security strategies for data storage like Data Tokenization, Masking, etc.

In this episode, I covered sub-topics from Domain 2 of the CCSP exam.

I discussed Data Storage Types and Threats to the Storage.

In the next week, I will cover various Security strategies for the data storage like DLP (Data Loss Prevention)

Visit technokofe.com to read about them and prepare for next week's episode.

In this episode, I covered sub-topics from Domain 2 of the CCSP exam.

I discussed Cloud Secure Data Life Cycle.

In the next week, I will cover various storage techniques and security threats to them.

Visit technokofe.com to read about them and prepare for next week's episode.

Reach me on Twitter - @sociotech_dev

Reach me on Mastodon - @dmagnate@hachyderm.io

In this episode, I covered sub-topics from Domain 1 of the CCSP exam.

I discussed various Compliances and Certifications for CSPs.

With it we finished Domain 1, next week we will have a crisp revision and proceed to Domain 2, Cloud Data Security.

Visit technokofe.com to read about them and prepare for next week's episode.

Reach me on Twitter - @sociotech_dev

Reach me on Mastodon - @dmagnate@hachyderm.io

In this episode, I covered sub-topics from Domain 1 of the CCSP exam.

I discussed Security considerations for PaaS and SaaS

Also, we talked about Platform Engineering.

In the next episode, I will discuss topics like Compliance Standards & Certifications. Visit technokofe.com to read about them and prepare for next week's episode.

Reach me on Twitter - @sociotech_dev

Reach me on Mastodon - @dmagnate@hachyderm.io

In this episode, I covered sub-topics from Domain 1 of the CCSP exam.

I discussed Business Continuity Planning, Disaster Recovery & IaaS Security.

Also, we talked about Platform Engineering.

In the next episode, I will discuss topics like PaaS Security, SaaS Security, and Compliance Standards & Certifications. Visit technokofe.com to read about them and prepare for next week's episode.

Reach me on Twitter - @sociotech_dev

Reach me on Mastodon - @dmagnate@hachyderm.io

In this episode, I covered sub-topics from Domain 1 of the CCSP exam.

I discussed Common Threats to the Cloud and Secure Data Lifecycle.

In the next episode, I will discuss topics like Business Continuity Planning, Disaster Recovery, and Cost-benefit analysis. Visit technokofe.com to read about them and prepare for next week's episode.

Reach me on Twitter - @sociotech_dev

Reach me on Mastodon - @dmagnate@hachyderm.io

In this episode, I covered sub-topics from Domain 1 of the CCSP exam.

I discussed Cryptography & Key Management Systems, Data & Media Sanitization, and Virtualization Security.

In the next episode, I will discuss topics like Common Threats to Cloud, Secure Data lifecycle, etc. Visit technokofe.com to read about them and prepare for next week's episode.

To download CCSP official prep guide, use the below link,

https://www.isc2.org/Certifications/CCSP

In this episode, I gave a quick sneak peek of the Get Certified Together series journey. What we achieved last year and what is ahead of us.

In the next episode, I will discuss common threats to the Cloud, KMS, Data sanitization, etc. Visit technokofe.com to read about them and prepare for next week's episode.

In this episode, I covered sub-topics from Domain 1 of the CCSP exam.

I discussed Cloud Reference Architecture, Key Considerations for Cloud-based deployments, and Security concepts relevant to cloud computing, viz. Network Security and Identity & Access management.

In the next episode, I will discuss topics like Common threats to the Cloud, Cloud Data Security, etc. Visit technokofe.com to read about them and prepare for next week's episode.

In this episode, I covered sub-topics from Domain 1 of the CCSP exam.

I discussed Cloud Computing characteristics, Cloud Service Models, Cloud Deployment Models, and Various roles in Cloud Services.

In the next episode, I will discuss remaining topics like Cloud Reference Architecture, Cloud Data Security, etc. Visit technokofe.com to read about them and prepare for next week's episode.

In this episode,

I talked to Mr. Zhou Zhi Hao to get insights on the journey to become a CCSP professional, the role of Information Security in our life, and the Idea behind ISC2. He is one of the top Info Sec professionals in Singapore, with immense experience in IT. He is also serving as Secretary and Chief Technology Officer for the ISC2 Singapore chapter.

https://www.linkedin.com/in/zhou-zhihao/

For beginners, ISC2 has another program to Kick Start the InfoSec journey, Certified in Cyber Security, URL below

https://www...

In this episode, I covered all domains in detail from the syllabus of the CCSP Exam including subtopics.

I discussed the format of the Exam, passing criteria, and how to keep your credentials updated once you get certified.

From the next episode, we start domain 1 of the exam with the first 3 subtopics. Visit technokofe.com to read about the first three topics in advance and prepare yourself for next week's episode.

In this episode, I will be discussing, where we are headed in the current Get Certified Together series, with an announcement for the CCSP program.

Also, in collaboration with my friend with the Open-Source community, Techbeast, based out in Singapore, we are launching a new Podcast series, Life in Tech (Cloud.Data.Code.). The first episode is dropping on the upcoming weekend on 14th Nov 2022.

In this episode, I will be sharing my experience with the exams and What is next in this series.

All this finally recorded in my own voice. Hope you enjoyed it. 

In this episode, I will be covering topics from Domain 5 of CompTIA Security+ Sy 601. Topics covered in the episode are,

Security Frameworks

Supply Chain Security

ISO27001 and ISO27002

SOC Reports

NIST

In this episode, I will be covering topics from Domain 5 of CompTIA Security+ Sy 601. Topics covered in the episode are,

Security Controls

Risk Management

Risk Assessment

In this episode, I will be covering topics from Domain 4 of CompTIA Security+ Sy 601. Topics covered in the episode are, 

Investigation Types

Type of SOC Reports

Digital Forensics

MITRE Framework

Cyber Kill Chain

In this episode, I will be covering topics from Domain 4 of CompTIA Security+ Sy 601. Topics covered in the episode are,

Incident Response Planning

Containment

Mitigation

Eradication and Recovery

Incident Closure

In this episode, I will be covering topics from Domain 3 of CompTIA Security+ Sy 601. Topics covered in the episode are,

Firewalls

Reverse and Forward Proxies

Load balancers and VPN

DDoS and Flooding Attacks

Wireless Security

Command line Tools like netstat and ping

In this episode, I will be covering topics from Domain 3 of CompTIA Security+ Sy 601. Topics covered in the episode are,

Network Security

Switches and Routers

ACL 

Ports and Protocols

In this episode, I will be covering topics from Domain 3 of CompTIA Security+ Sy 601. Topics covered in the episode are,

Operating System Security

Patching

Hardware Security

Asset Management

Trusted Platform Modules

In this episode, I will be covering topics from Domain 3 of CompTIA Security+ Sy 601. Topics covered in the episode are,

Identity and Access Management

Authentication, Authorization, and Accounting

Role-Based Access Controls

Multi-Factor Authentication

Radius, LDAP, SAML, and OpenID

In this episode, I will be covering topics from Domain 2 of CompTIA Security+ Sy 601. Topics covered in the episode are,

Cloud Security

Virtualization and Hypervisors

Shared Responsibility Model

In this episode, I will be covering topics from Domain 2 of CompTIA Security+ Sy 601. Topics covered in the episode are,

Cryptography

Symmetric, Asymmetric Encryption

PKI

Digital Certificates

Digital Signatures

Hashing Algorithms

TLS Handshakes

In this episode, I will be covering topics from Domain 2 of CompTIA Security+ Sy 601. Topics covered in the episode are,

Physical Security

Data Sanitization

Secure Code Design, and DevSecOps

Application Attacks like SQL Injection, Buffer Overflow, Cross-Site Scripting, etc.

Input Validation and Code Reviews. 

In this episode, I will be covering Domain 1 of CompTIA Security+ Sy 601. Topics covered in the episode are,

Threats, Attack Vectors, Social Engineering Attacks like Phishing, Pharming, etc. 

Password Attacks, CVE, CVSS, Zero-Day Vulnerabilities, 

Pen Testing

In this Episode, I will be covering Introduction to CompTIA Security+ Sy 601. Topics covered in the exam, Why one should pursue it and how the exam format looks like.

This podcast is part of Get Certified Together program from TechnoKofe.

Visit our website www.technokofe.com for more!