Fix the Leaky Cloud: Cloud Security Posture Hardening

<p>Udaan Wallet, a fictional Bengaluru digital wallet, learned about its biggest security problem from a customer who emailed a link to a spreadsheet of other customers' balances. You join as cloud security engineer that week.</p><p>In four lessons you learn the shared responsibility model and how posture scanners (CSPM tools such as Prowler) find misconfigurations, then fix them in Bartman's in-browser Mock Cloud Console: storage (public access, encryption, versioning), security groups (SSH, RDP and database ports open to the internet), compute (IMDSv2, encrypted volumes), identity (MFA, key rotation, unused keys) and the audit trail. Some things are public on purpose; you learn to document an exception instead of breaking the business.</p><p>The account is simulated and generated for you: no real cloud account or credentials are needed. Part of the Bartman Cybersecurity track (Professional Certificate in Cybersecurity, LSBF).</p>

Tools: Cloud security, CSPM, AWS concepts, S3, Security groups, IAM, CloudTrail