r/CloudSecurityPros

This is something I've been checking out for how others approach it

A tutorial can show you how to configure stuff, set up Conditional Access, Azure RBAC, Sentinel rules, Defender, etc. But after you've followed it once, what's your method for actually getting good at investigating problems involving those things?

Do you create your own scenarios afterwards, or just move on to the next topic?

Curious what people actually do?

I’m still a student in my last year of Highschool. I want to get into Cloud Security. My goal is to study 2-3 hours a day to be able to work next year and I don’t have to go to Uni. Is my goal possible and what are early mistakes I can avoid? Thank you for every advice!

This is something I've been struggling with.

A tutorial or a guide shows you how to configure Conditional Access, RBAC, Sentinel rules, Defender, etc. But after you've followed it and practised the configuration, what's your method for actually getting good at investigating problems involving those things?

Do you create your own scenarios afterwards, or just move on to the next topic?

Curious what people actually do, not what the ideal learning process is supposed to be.

I'm curious about how people go beyond courses and documentation. Apart from the courses on YouTube, Udemy, labs, etc.

When you're learning something like MITRE ATT&CK, IAM, RBAC, Sentinel, Defender for Cloud, etc., what do you actually do to practice it?

Do you:

• build things in your own cloud tenant?
• use dedicated labs?
• use CTFs?
• follow attack/detection walkthroughs?
• create your own scenarios?