CrowdStrike CCCS case studies
CrowdStrike CCCS · Put your knowledge to work in context.
The CrowdStrike Certified Cloud Security Professional (CCCS) is a vendor certification aimed at security practitioners who defend cloud environments and want to demonstrate working knowledge of cloud-native security concepts and CrowdStrike's cloud security approach. Candidates typically include cloud security engineers, security analysts, SOC staff moving into cloud work, and architects responsible for securing workloads and identities across public cloud providers. The CrowdStrike CCCS case studies are 5 cases and about 3,344 words.
1Prioritizing a 140-Account AWS Estate After a CSPM Rollout
A financial-services company runs 140 AWS accounts under one organization, split into Production, Non-Production, and Shared Services OUs. A newly acquired subsidiary still operates its own AWS organization with 35 accounts and its own Terraform pipeline.
670 words, about 3 min2Cross-Account Role Trust and EKS Credential Blast Radius
A SaaS provider runs 60 AWS accounts and has just enabled a CIEM tool. It reports 12 cross-account roles whose trust policies allow a partner's AWS account ID; one of those roles has AdministratorAccess and is used by a nightly batch job.
677 words, about 3 min3Runtime Crypto-Mining Alert on Shared EKS Nodes
A media company runs 400 EC2 instances and 1,200 containers on EKS across three regions. The Falcon sensor is on 85% of EC2 instances; 40 legacy hosts cannot install it because of an unsupported kernel, so the team relies on weekly agentless snapshots.
674 words, about 3 min4GuardDuty C2 Alert With Incomplete VPC and DNS Visibility
A health-tech company has 60 AWS accounts. VPC Flow Logs are enabled in only 20 of them, DNS query logging is absent, and most private subnets route 0.0.0.0/0 to a NAT gateway.
667 words, about 3 min5Credential Exfiltration, CloudTrail Tampering, and a 72-Hour Reporting Clock
A payments company runs 90 AWS accounts under Organizations. GuardDuty is enabled in all regions, and an organization CloudTrail trail delivers to a central S3 bucket.
656 words, about 3 min