Cloud Security Automation
Overview
Through the Palo Alto Networks Cloud Security Automation labs, learners will develop practical understanding of Kubernetes fundamentals, including its architecture and management through Minikube, while also exploring persistent storage configuration with Persistent Volumes and Claims. The labs emphasize developing with microservices and the integration of DevSecOps practices that include automated security scans for vulnerabilities, alongside practical experience using the Cloud-Native Application Protection Platforms (CNAPP) for vulnerability management and policy compliance. Additionally, learners will understand threat visualization and incident response using the MITRE ATT&CK framework, all through hands-on exercises that reinforce theoretical knowledge in real-world scenarios.
Learn more about Palo Alto Networks: Palo Alto Networks Cybersecurity Academy
What You Will Learn
- Deploy and manage Kubernetes clusters using Minikube
- Implement DevSecOps practices with automated security scanning
- Configure Cloud-Native Application Protection Platforms (CNAPP) for vulnerability management
- Apply CNAPP runtime defense policies to protect containerized workloads
- Visualize threats and plan incident response using the MITRE ATT&CK framework
Best For
- Learners preparing for cloud-native security and DevSecOps career paths
- Professionals seeking hands-on Kubernetes and CNAPP experience
- Educators teaching advanced cloud security automation and container orchestration
- Organizations adopting cloud-native application protection and automated vulnerability management
Prerequisites
- Completion of Cloud Security Fundamentals or equivalent cloud security knowledge
- Basic familiarity with Linux command line and container concepts
- Understanding of software development lifecycle and CI/CD pipelines is helpful
Lab Exercises (7 labs)
| # | Title |
|---|---|
| 1 | Introduction to Kubernetes Pt. 1 |
| 2 | Introduction to Kubernetes Pt. 2 |
| 3 | Introduction to Kubernetes: Microservices and DevSecOps |
| 4 | Overview of Cloud-Native Application Protection Platforms (CNAPP) Pt. 1 |
| 5 | Overview of Cloud-Native Application Protection Platforms (CNAPP) Pt. 2 |
| 6 | Cloud-Native Application Protection Platforms (CNAPP) Runtime Defense Pt. 1 |
| 7 | Cloud-Native Application Protection Platforms (CNAPP) Runtime Defense Pt. 2 |
Pod Topology Palo Alto Networks Cloud Security Automation Pod
Virtual Machines
Documentation & Resources
- Cloud Security Automation Pod Planning and Installation Guide (PDF)
- Cloud Security Automation Pod Install Guide for Proxmox VE (external)
- Release Notes (external)
Setup: Install Palo Alto Networks Cloud Security Automation via the Course Manager. See the Admin Guide →
Related Labs
Cloud Security Fundamentals v2
Learn the fundamentals of cloud security, how to recognize threats, and how to defend against clo...
Security Operations Fundamentals v2
A high-level introduction to the general concepts of SOC (Security Operations Center) and SecOps ...
Cybersecurity Foundation v2
Learn the fundamentals of cybersecurity and the concepts required to recognize and potentially mi...
Network Security Fundamentals v2
Introduce the fundamentals of network security including how to recognize and potentially defend ...