CKS - Certified Kubernetes Security Specialist

Self-paced recorded course

Study Kubernetes security at your own pace. Explore cluster hardening, workload security, the software supply chain and runtime threat detection through recorded lessons.

Complete recorded course

₹12,000 INR / $125 USD

Pay in INR or USD. Our team will help with payment and recording access.

1 year of recording access. No live classes, labs or certification exam included.

Course content

Kubernetes Cluster Setup for Security

  • Use Network security policies to restrict cluster level access
  • Use CIS benchmark to review the security configuration of Kubernetes components (etcd,kubelet, kubedns, kubeapi)
  • Properly set up Ingress objects with security control
  • Protect node metadata and endpoints
  • Minimize use of, and access to, GUI elements

Cluster Hardening

  • Restrict access to Kubernetes API
  • Use Role Based Access Controls to minimize exposure
  • Exercise caution in using service accounts

System Hardening

  • Minimize host OS footprint (reduce attack surface)
  • Minimize IAM roles
  • Minimize external access to the network
  • Appropriately use kernel hardening tools such as AppArmor, seccomp

Minimizing Microservices Vulnerabilities

  • Setup appropriate OS level security domains such as using PSP, OPA, security contexts
  • Manage Kubernetes secrets
  • Use container runtime sandboxes in multi-tenant environments such gvisor and kata containers
  • Implement pod to pod encryption by use of mTLS

Logging and Runtime Security

  • Perform behavioral analytics of syscall process and file activities at the host and container level to detect malicious activities
  • Detect threats within physical infrastructure, apps, networks, data, users and workloads
  • Detect all phases of attack regardless where it occurs and how it spreads
  • Perform deep analytical investigation and identification of bad actors within environment
  • Ensure immutability of containers at runtime
  • Use Audit Logs to monitor access

Supply Chain Security

  • Minimize base image footprint
  • Secure your supply chain: whitelist allowed registries, sign and validate images
  • Use static analysis of user workloads
  • Scan images for known vulnerabilities

Good to know

How does this course work?
This is a self-paced recorded course. Watch the lessons on your own schedule and revisit topics as you learn. There are no live classes or scheduled batches for this course.
What is included?
The course recordings are included, with 1 year of recording access. Lab environments, live teaching and certification exams are not included.
Can I watch a lesson before buying?
Yes. Use Watch free preview in the course content to watch the sample recording. The rest of the course is available after purchase.
What happens when I click Buy course?
A short enquiry form opens. Share your details and our team will contact you to confirm the price, payment and recording access. Submitting the form does not take a payment or activate course access.

Buy course

Send a purchase enquiry. Our team will contact you to confirm payment and recording access.