CCAS case studies
CCAS · Put your knowledge to work in context.
The Certified Cloud Application Security (CCAS) credential targets security engineers, cloud architects, application security analysts, and DevSecOps practitioners who are responsible for protecting workloads that run on public cloud platforms rather than on-premises data centres. It tests whether you can reason about security across the whole application lifecycle: how a cloud-native design is threat-modelled, how identities and secrets are handled, how code moves through a pipeline, how data is encrypted and keys are governed, how APIs are exposed and defended, and how runtime activity is logged and investigated when something goes wrong. The CCAS case studies are 5 cases and about 3,617 words.
1Multi-Tenant SaaS Isolation for an EU Bank
A B2B SaaS provider runs a multi-tenant analytics platform on AWS. All tenants share an Amazon RDS for PostgreSQL cluster; isolation relies on a tenant id column enforced by the ORM.
721 words, about 4 min2Contractor Access and the Orphaned OAuth Token
A fintech has 600 employees and 80 contractors. Workforce identity is in Okta; AWS access is through IAM Identity Center with permission sets; production is in three AWS accounts.
720 words, about 4 min3Envelope Encryption and a Restored Production Snapshot
A healthcare analytics company stores PHI in a multi-cloud architecture: primary on AWS us-east-1, disaster recovery on Azure West Europe. The application uses envelope encryption: AWS KMS customer-managed keys wrap data keys; Azure Key Vault stores a separate wrapping key for DR.
713 words, about 4 min4Partner API Credential Leak and Verbose Errors
A logistics company exposes a partner API on AWS API Gateway. Partners authenticate with OAuth 2.0 client credentials; tokens are issued by an internal authorization server and are valid for 24 hours.
705 words, about 4 min5Cryptomining in an EKS Cluster with Weak Guardrails
A media company runs 200 microservices on Amazon EKS. Images are built by 12 teams and pushed to a shared Amazon ECR repository.
758 words, about 4 min