Certified Cloud Security Analyst case studies
Certified Cloud Security Analyst · Put your knowledge to work in context.
The Certified Cloud Security Analyst (CCSA) is a cloud computing certification offered by the Global Association for Quality Management (GAQM), a certification body whose portfolio spans project management, software testing, information systems security, data centre and cloud computing tracks. CCSA sits in GAQM's cloud computing family and is aimed at practitioners who need to reason about cloud risk rather than only operate cloud consoles: security analysts, cloud administrators moving into security roles, auditors and compliance staff who review cloud environments, and IT generalists preparing to specialise. The Certified Cloud Security Analyst case studies are 5 cases and about 4,497 words.
1The control framework nobody owns
Meridian Pay is a 5,200-employee payments firm running AWS (240 accounts under Control Tower), Azure for Microsoft 365, and GCP for analytics. A state banking regulator requires an annual control mapping to a recognized framework.
897 words, about 4 min2The snapshot that was never public until it was
CareLoop sells a patient-portal SaaS to 40 hospitals. Its stack is containers on Amazon EKS, documents in S3, patient records in RDS for PostgreSQL Multi-AZ (a managed service), and e-signature handled by an external SaaS vendor.
838 words, about 4 min3The contractor with a valid session token
Northwind Logistics federates 4,200 employees and 900 contractors from Okta into AWS IAM Identity Center and Microsoft 365. Okta Verify push is the second factor for about 70% of users; the remainder still use SMS.
972 words, about 5 min4One hundred and twenty deploys a day versus a critical CVE
Brightline Health's platform team runs 350 developers across 1,400 GitHub repositories, 60 Java and Node microservices on EKS, and averages 120 production deployments a day through GitHub Actions. SCA, SAST and container scanning were added 18 months ago in advisory mode; the backlog is 14,000 findings, 96 of them critical.
893 words, about 4 min5Crypto-mining in account 47 at 02:14
Corvus Payment Services is a PCI DSS Level 1 acquirer running 90 AWS accounts under Organizations, with an organization trail delivered to a dedicated log-archive account, GuardDuty enabled everywhere, and Security Hub aggregated into the security account. CloudTrail object retention in S3 is one year; CloudWatch Logs retention is 90 days.
897 words, about 4 min