☁️ Cloud Security Certification · 2025

GIAC Public Cloud Security Certification (GPCS)

Secure and defend the leading public cloud platforms. GPCS validates the ability to protect cloud environments across AWS, Azure, and GCP — covering cloud IAM, data protection, serverless security, multi-cloud compliance, credential management, network security, storage hardening, and the auditing skills needed to assess and defend any public cloud deployment.

AWS Security Azure Security GCP Security Cloud IAM Serverless Multi-Cloud Credential Management Cloud Auditing

Enroll Now

Cloud IAM & Identity SecurityIAM policies, SSO, end-user identity, and access hardening

Cloud Data Protection & StorageEncryption, key management, storage hardening, data exfil risks

Serverless & Application Platform SecurityServerless hardening, Firebase, app services, and misconfigs

Virtual Network Security & Multi-CloudVPC hardening, flow logging, credential management, benchmarks

Exam Questions

2 hrs

Duration

64%

Passing Score

GIAC

Certified

Why It's Essential

The Cloud Is Now the Primary Attack Surface for Enterprise

Cloud misconfiguration is the leading cause of data breaches today. GPCS certifies professionals who understand the nuances of AWS, Azure, and GCP — and have the skills to audit, harden, and defend each platform effectively.

Trending

Cloud Misconfiguration Is the Top Cause of Data Breaches

IAM misconfigurations, exposed storage buckets, and insecure serverless functions are responsible for more data breaches than any other attack vector — GPCS addresses all of these directly.

Multi-Cloud

Covers AWS, Azure, and GCP in a Single Certification

GPCS is unique in validating multi-cloud security expertise — giving professionals the knowledge to assess and defend whichever platform their organisation uses or migrates to.

Trending

Credential

Credential-Based Cloud Attacks Are Rapidly Increasing

Instance metadata API abuse, IAM privilege escalation, and credential theft are the dominant techniques in cloud breaches — GPCS teaches how to identify and mitigate each of them.

Fastest

Cloud Security Is the Fastest-Growing Security Specialisation

Cloud security roles are among the fastest-growing and highest-compensated in cybersecurity, and GPCS provides formal validation of the specific skills these roles require.

Course Content

Complete GPCS Curriculum

Click any module to expand and explore the topics covered in detail.

Cloud IAM, Identity Management & Credential Security

5 Topics

Cloud Identity and Access Management (IAM) — security concerns and steps to secure IAM policies

Cloud end-user identity management solutions and single sign-on (SSO) across AWS, Azure, and GCP

Best practices for storing long-term credentials securely in cloud environments

Instance metadata APIs — how they work, credential-based attacks against them, and security assessment

Multicloud and credential management fundamentals across the public cloud landscape

Cloud Data Protection, Encryption & Storage Security

5 Topics

Key management systems — assessment and secure configuration across AWS KMS, Azure Key Vault, and GCP KMS

Using encryption services to secure sensitive data stored in cloud platforms

Securing cloud storage services: S3, Azure Blob Storage, GCS — configuration and access controls

Data exfiltration risks associated with cloud storage services and how to mitigate them

Cloud data protection compliance requirements and auditing frameworks

Serverless, Application Services & Virtual Network Security

5 Topics

Serverless architectures — assessing environments for security misconfigurations across Lambda, Azure Functions, and Cloud Functions

Hardening serverless functions against persistence attacks and lateral movement

Securing cloud application service platforms and hardening common configurations

Google Firebase database security — common configuration weaknesses and hardening techniques

Virtual private network default settings — securing VPC configurations, flow logging, and monitoring

Multi-Cloud Compliance, Auditing & Secure Access

5 Topics

Tools and services for auditing cloud environments for compliance with CIS Benchmarks and other frameworks

Cloud integration and benchmarking — comparing security posture across AWS, Azure, and GCP

Private service endpoints and securing remote administrative access to cloud platforms

Evaluating and comparing public cloud service provider security offerings and shared responsibility models

Multi-cloud security strategy — integration, governance, and unified visibility across cloud providers

FAQs

Frequently Asked Questions

What is the GIAC Public Cloud Security (GPCS) certification?

GPCS validates a practitioner's ability to secure the cloud in both public and multi-cloud environments. GPCS-certified professionals are familiar with the nuances of AWS, Azure, and GCP and have the skills needed to defend each of these platforms — covering IAM, data protection, serverless security, networking, and compliance auditing.

What are the GPCS exam requirements?

The GPCS exam consists of 75 questions, is web-based and proctored, has a 2-hour time limit, and requires a minimum passing score of 64%. Proctoring is available via ProctorU (remote) or PearsonVUE (onsite).

What cloud platforms does GPCS cover?

GPCS covers all three major public cloud platforms: Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). The certification validates multi-cloud expertise rather than specialising in a single provider.

What topics does GPCS cover?

GPCS covers cloud data protection, IAM, cloud integration and benchmarking, multi-cloud and credential management fundamentals, securing cloud services (access and private endpoints), securing cloud application platforms, securing cloud storage, securing serverless functions, and virtual network security and logging.

How does GPCS differ from AWS or Azure certifications?

Provider certifications (AWS, Azure, GCP) focus on one platform and often emphasise all cloud services including non-security topics. GPCS focuses exclusively on security across all three major providers, making it ideal for security professionals who need to assess or defend multi-cloud environments regardless of which provider is in scope.

Is GPCS relevant for DevOps and cloud engineering roles?

Yes — GPCS is particularly valuable for cloud engineers and DevOps professionals who architect and deploy cloud infrastructure, as it provides the security knowledge needed to avoid common misconfigurations that lead to breaches, and to implement secure-by-design cloud architectures.

Secure the Cloud with GPCS

Join Zetlan Technologies' GPCS programme and develop the multi-cloud security skills that are in highest demand across enterprise security, DevOps, and cloud engineering roles. Earn your GIAC certification and defend AWS, Azure, and GCP with confidence.

GIAC Public Cloud Security Certification (GPCS)

The Cloud Is Now the Primary Attack Surface for Enterprise

GPCS Exam Details

Complete GPCS Curriculum

For Cloud Engineers, Security Teams & Auditors

Frequently Asked Questions

Secure the Cloud with GPCS