Certified Kubernetes Security Specialist (CKS) Course Overview

Course Prerequisites

Target Audience for Certified Kubernetes Security Specialist (CKS)

The Certified Kubernetes Security Specialist (CKS) course is designed for IT professionals focused on Kubernetes cluster security and best practices.

• Kubernetes Administrators
• DevOps Engineers
• Cloud Security Engineers
• Cloud Architects
• Site Reliability Engineers (SREs)
• Security Analysts and Architects focusing on containerized environments
• IT Security Professionals
• Infrastructure Security Engineers
• Application Developers with a focus on DevSecOps
• System Administrators looking to specialize in container orchestration security
• Compliance Managers dealing with container-based deployments
• Technical Leads overseeing Kubernetes infrastructure

Learning Objectives - What you will Learn in this Certified Kubernetes Security Specialist (CKS)?

Introduction to Course Learning Outcomes

The Certified Kubernetes Security Specialist (CKS) course equips participants with best practices and skills to secure container-based applications and Kubernetes platforms during build, deployment, and runtime.

Learning Objectives and Outcomes

• Verify the integrity of Kubernetes platform binaries to ensure secure deployment.
• Implement access restrictions to Kubernetes API to minimize unauthorized access risks.
• Apply Role-Based Access Control (RBAC) to enforce the principle of least privilege.
• Manage service accounts diligently, disable defaults, and restrict permissions for new accounts.
• Keep Kubernetes updated to mitigate vulnerabilities and enhance security features.
• Reduce the host operating system's attack surface to fortify cluster security.
• Limit IAM roles and permissions to the minimum required for operational efficiency.
• Restrict external network access and implement network security best practices.
• Utilize kernel hardening tools like AppArmor and Seccomp to protect against exploits.
• Configure OS-level security domains using PSP, OPA, and Security Contexts to isolate and secure workloads.
• Effectively manage Kubernetes secrets for sensitive data protection.
• Employ container runtime sandboxes in multi-tenant environments to isolate workloads.
• Implement mutual TLS (mTLS) for secure pod-to-pod communication.
• Optimize base images to reduce vulnerabilities and ensure a secure foundation for containerized applications.
• Secure the supply chain by using trusted registries, signing images, and validating image signatures.
• Conduct static analysis on user workloads and scan images for known vulnerabilities.
• Monitor and analyze system calls, file activities, and behavioral patterns to detect malicious activities.
• Identify threats within the infrastructure, applications, networks, data, users, and workloads across all attack phases.
• Conduct in-depth investigations to identify and address security breaches.
• Ensure container immutability at runtime and utilize audit logs for monitoring and compliance.