Sans Sec 549 2021 _hot_ May 2026

: Building a scalable identity perimeter by centralizing workforce identity and implementing federation (e.g., from Microsoft Entra ID to AWS/GCP) to prevent identity sprawl.

: Implementing micro-segmentation using hub-and-spoke models and centralized traffic inspection firewalls to secure north-south and east-west traffic. sans sec 549 2021

Understanding SANS SEC549: Enterprise Cloud Security Architecture : Building a scalable identity perimeter by centralizing

: Designing conditional access policies and guardrails for resource access, ensuring that trust is continuously verified across workforce, customer, and workload identities. The course focuses on architectural patterns and design

The course focuses on architectural patterns and design philosophies across major providers like AWS, Azure, and Google Cloud, rather than just basic engineering or "infrastructure as code". Key Learning Pillars of SEC549

: Creating data perimeters for cloud-hosted repositories, including data lake security, shared Key Management Service (KMS) designs, and disaster recovery planning.

Test their ability to recognize secure versus insecure architectural patterns.