Free CCSP — Certified Cloud Security Professional Roadmap
Cloud security at architect level. The exam is vendor-neutral, so the labs here practise it on both Azure and AWS. The usual next step for a CISSP holder whose estate has moved to cloud. ISC2 revised the outline on 1 August 2026; the main course follows an earlier one, so the steps after it fill the gaps.
4 steps · 19 free videos · 1 free read
Create your free account to open all 2,396 free items
The 20 free items on this page — and every other free lesson, video and guide — open once you have a free StationX account. No card, no trial.
Before you start
Read these first
The free roadmap
4 steps, in order
The 🔒 rows show what the full roadmap adds at each step. StationX Membership opens every course and its labs: $299 / year ($24.92/mo billed annually). Infrastructure Labs labs are a separate add-on.
Start here →
Step 1 — Learn the six CCSP domains
Cloud concepts, data, platform, application, operations and legal. This course follows an earlier CCSP outline (its domain names date from 2015) and is light on platform, operations and legal: the next steps cover those.
🔒 The full roadmap adds here: 1 full course (Membership)
- Course · Certified Cloud Security Professional - CCSP · 🔒 Membership
Step 2 — Cloud platform, infrastructure and operations
Secure the platform and run it, on Azure and on AWS, with business continuity and disaster recovery planned in.
🔒 The full roadmap adds here: 2 full courses · hands-on labs 1–42 of 57 (courses in Membership · 42 labs in Infrastructure Labs)
- Course · Introduction to Cloud Security with Microsoft Azure · 🔒 Membership
- Course · Business Continuity and Disaster Recovery Planning · 🔒 Membership
- Lab 1 of 57 · Configure Authentication for an Azure Web App [Guided] · 🔒 Infrastructure Labs
- Lab 2 of 57 · Configure Virtual Network Connectivity by Using Peering [Guided] · 🔒 Infrastructure Labs
- Lab 3 of 57 · Configure an Application Security Group [Guided] · 🔒 Infrastructure Labs
- Lab 4 of 57 · Can You Configure Network Security to Allow Application Traffic? [Advanced] · 🔒 Infrastructure Labs
- Lab 5 of 57 · Configure Azure Disk Encryption [Guided] · 🔒 Infrastructure Labs
- Lab 6 of 57 · Can You Harden Virtual Machines in Azure? [Advanced] · 🔒 Infrastructure Labs
- Lab 7 of 57 · Configure Security by Using the Azure Kubernetes Service [Guided] · 🔒 Infrastructure Labs
- Lab 8 of 57 · Create Azure Resource Locks on a Web App [Guided] · 🔒 Infrastructure Labs
- Lab 9 of 57 · Can You Configure Multi-Scope Network Security? [Advanced] · 🔒 Infrastructure Labs
- Lab 10 of 57 · Can You Configure Multi-Scope Resource Permissions? [Expert] · 🔒 Infrastructure Labs
- Lab 11 of 57 · Configure a Network Security Group in a Virtual Network [Guided] · 🔒 Infrastructure Labs
- Lab 12 of 57 · Configure Route Tables in a Virtual Network [Guided] · 🔒 Infrastructure Labs
- Lab 13 of 57 · Configure Global Virtual Network Peering [Guided] · 🔒 Infrastructure Labs
- Lab 14 of 57 · Can You Implement a Secure Azure Virtual Machine Network? [Advanced] · 🔒 Infrastructure Labs
- Lab 15 of 57 · Configure a Virtual Network Service Endpoint [Guided] · 🔒 Infrastructure Labs
- Lab 16 of 57 · Implement Security for an Azure Web App [Guided] · 🔒 Infrastructure Labs
- Lab 17 of 57 · Can You Implement Security for an Azure Web App? [Advanced] · 🔒 Infrastructure Labs
- Lab 18 of 57 · Create an API Management Instance [Guided] · 🔒 Infrastructure Labs
- Lab 19 of 57 · Can You Configure an API Management Solution? [Advanced] · 🔒 Infrastructure Labs
- Lab 20 of 57 · Can You Create a Secure Web App? [Expert] · 🔒 Infrastructure Labs
- Lab 21 of 57 · Log Virtual Machine Network Traffic by Using Network Watcher [Guided] · 🔒 Infrastructure Labs
- Lab 22 of 57 · Monitor Communication Between Virtual Machines by Using Network Watcher [Guided] · 🔒 Infrastructure Labs
- Lab 23 of 57 · Implement an Azure Function App [Guided] · 🔒 Infrastructure Labs
- Lab 24 of 57 · Configure Secure Identities by Using AWS Services [Guided] · 🔒 Infrastructure Labs
- Lab 25 of 57 · Respond to Compromised AWS Resources [Guided] · 🔒 Infrastructure Labs
- Lab 26 of 57 · Use CloudWatch Alarms to Generate Alerts [Guided] · 🔒 Infrastructure Labs
- Lab 27 of 57 · Configure Logging for an EC2 Website [Guided] · 🔒 Infrastructure Labs
- Lab 28 of 57 · Detect AWS Threats and Automate Remediation [Guided] · 🔒 Infrastructure Labs
- Lab 29 of 57 · Configure AWS Network Security for EC2 Resources [Guided] · 🔒 Infrastructure Labs
- Lab 30 of 57 · Protect AWS Network Resources by Using WAF [Guided] · 🔒 Infrastructure Labs
- Lab 31 of 57 · Configure a Secure Custom AMI [Guided] · 🔒 Infrastructure Labs
- Lab 32 of 57 · Can You Deploy Secure AWS EC2 Resources? [Advanced] · 🔒 Infrastructure Labs
- Lab 33 of 57 · Implement AWS Credentials and Policies by Using IAM [Guided] · 🔒 Infrastructure Labs
- Lab 34 of 57 · Secure Remote Administration for EC2 Instances [Guided] · 🔒 Infrastructure Labs
- Lab 35 of 57 · Implement Encryption and Manage the Lifecycle of Data at Rest [Guided] · 🔒 Infrastructure Labs
- Lab 36 of 57 · Can You Provide Secure Access to AWS Data and Resources [Advanced] · 🔒 Infrastructure Labs
- Lab 37 of 57 · Can You Configure a Secure AWS Environment [Expert] · 🔒 Infrastructure Labs
- Lab 38 of 57 · Configure Security for an IAM User [Guided] · 🔒 Infrastructure Labs
- Lab 39 of 57 · Implement an IAM Policy [Guided] · 🔒 Infrastructure Labs
- Lab 40 of 57 · Implement a Security Monitoring Process [Guided] · 🔒 Infrastructure Labs
- Lab 41 of 57 · Implement Encryption at Rest [Guided] · 🔒 Infrastructure Labs
- Lab 42 of 57 · Implement Protection for Data and Infrastructure [Guided] · 🔒 Infrastructure Labs
Step 3 — Cloud data and application security, including AI
Protect data and applications in the cloud, including generative AI and LLM applications.
Hands-on step: the labs for it are on the full roadmap.
🔒 The full roadmap adds here: 1 full course · hands-on labs 43–52 of 57 (course in Membership · 10 labs in Infrastructure Labs)
- Course · Generative AI Risks & Cybersecurity: LLM Security · 🔒 Membership
- Lab 43 of 57 · Configure Application Insights and App Service Logs for a Web App [Guided] · 🔒 Infrastructure Labs
- Lab 44 of 57 · Configure Security Recommendations for an Azure Virtual Machine [Guided] · 🔒 Infrastructure Labs
- Lab 45 of 57 · Can You Enable Secure Virtual Machines and Application Services? [Advanced] · 🔒 Infrastructure Labs
- Lab 46 of 57 · Enable Database Auditing for an Azure SQL Database [Guided] · 🔒 Infrastructure Labs
- Lab 47 of 57 · Enable Microsoft Defender for SQL in an Azure SQL Database [Guided] · 🔒 Infrastructure Labs
- Lab 48 of 57 · Can You Enable Security for an Azure SQL Database? [Advanced] · 🔒 Infrastructure Labs
- Lab 49 of 57 · Manage Shared Access Signature Keys [Guided] · 🔒 Infrastructure Labs
- Lab 50 of 57 · Configure Security for an Azure Cosmos DB Account [Guided] · 🔒 Infrastructure Labs
- Lab 51 of 57 · Can You Implement Security for an Azure Cosmos DB Account and a Storage Account? [Advanced] · 🔒 Infrastructure Labs
- Lab 52 of 57 · Can You Manage Security for Virtual Machines and Databases? [Expert] · 🔒 Infrastructure Labs
Try a free cloud security lab: Left open (~4 min) → A scripted simulation in your browser. No account needed.
Step 4 — Legal, risk and compliance
Privacy and legal requirements, risk management and compliance for cloud services.
🔒 The full roadmap adds here: 2 full courses · hands-on labs 53–57 of 57 (courses in Membership · 5 labs in Infrastructure Labs)
- Course · GRC Fundamentals - Learn Governance, Risk, and Compliance · 🔒 Membership
- Course · EU GDPR Foundations Course · 🔒 Membership
- Lab 53 of 57 · Configure Azure Policy to Improve Cloud Security [Guided] · 🔒 Infrastructure Labs
- Lab 54 of 57 · Can You Manage Azure Security and Compliance? [Advanced] · 🔒 Infrastructure Labs
- Lab 55 of 57 · Monitor Activity by Using the AWS Audit Manager [Guided] · 🔒 Infrastructure Labs
- Lab 56 of 57 · Evaluate AWS Config Rules [Guided] · 🔒 Infrastructure Labs
- Lab 57 of 57 · Governance and Compliance Evidence Collection [Guided] · 🔒 Infrastructure Labs
Do it hands-on
The full CCSP — Certified Cloud Security Professional roadmap
The same steps with every course and the hands-on labs, and your progress tracked.
The full roadmap with labs →What Membership includes · Full refund within 30 days if you haven't started a lab · cancel anytimeAdvanced
AI-Driven Security Engineering
Become the Cyber Security Expert the AI Era Needs.
StationX’s AI Master’s teaches you to create and deploy security solutions by directing AI. “No coding background required. You direct the AI; the AI does the building.”
Explore the AI Master’s →Create your free account to open all 2,396 free items
The 20 free items on this page — and every other free lesson, video and guide — open once you have a free StationX account. No card, no trial.