FCSS Public Cloud Security case studies
FCSS Public Cloud Security · Put your knowledge to work in context.
The FCSS Public Cloud Security credential is listed on our exam catalogue as a Fortinet Certified Solution Specialist certification focused on public cloud security, with the alias "FCSS in Public Cloud Security". It is aimed at security engineers, cloud architects, and network security professionals who design, deploy, and operate Fortinet security controls across public cloud environments such as AWS, Microsoft Azure, Google Cloud, and Oracle Cloud. The FCSS Public Cloud Security case studies are 5 cases and about 3,527 words.
1Who patches the guest OS? Correcting a shared responsibility misreading before an external audit
Northwind Bank runs 62 AWS accounts under AWS Organizations. During a quarterly review, an internal auditor flags 'unpatched OpenSSL 1.1.1 on 38 EC2 instances' and writes: 'Patching the guest operating system is AWS's responsibility under the shared responsibility model - raise a support case.' A separate finding notes that the same team runs 11 Amazon RDS for PostgreSQL instances and has never scheduled an engine upgrade, which a developer defends with 'RDS is managed, so AWS does everything.' The CISO wants a written clarification before the external audit in three weeks, plus a control plan that will generate evidence next quarter.
593 words, about 3 min2Merging two Azure estates whose hub VNets both use 10.0.0.0/16
Tailspin Toys runs a hub-and-spoke Azure estate: hub VNet 10.0.0.0/16 holding an Azure VPN Gateway, Azure Firewall, and a FortiGate NVA used for east-west inspection, peered to 14 spoke VNets. Tailspin has just acquired Adventure Works, whose entire estate - its own hub at 10.0.0.0/16 plus 9 spokes numbered from 10.1.0.0/16 - uses the identical hub range and is connected to its own datacenter by ExpressRoute.
655 words, about 3 min3FGCP pair across AZs behind a Gateway Load Balancer that never failed over
An e-commerce company runs a FortiGate-VM FGCP active-passive pair in AWS to inspect east-west traffic between 22 spoke VPCs attached to a Transit Gateway. Each FortiGate sits in a different AZ of us-east-1 inside a dedicated inspection VPC, behind a Gateway Load Balancer, with a GWLB endpoint in every spoke.
694 words, about 3 min43,700 CNAPP findings, four engineers, and a board that wants a number
Meridian Health consolidated 480 GCP projects into one organization and enabled Security Command Center Premium plus a third-party CNAPP. The console now shows 3,700 active findings.
619 words, about 3 min5Config drift, a plaintext API token, and 140 firewall VMs managed two different ways
A logistics company operates 140 FortiGate-VM instances: 90 in AWS across 3 regions provisioned with Terraform, and 50 in Azure across 2 regions provisioned from ARM templates. Engineers routinely fix incidents directly in the GUI.
966 words, about 5 min