Hands-on projects¶
Security is learned by doing. This site's guided build is Implement zero-trust security (4-5 hours): an identity provider, phishing-resistant MFA and identity-aware access with no implicit network trust, with inline commands for AWS, Azure and GCP. Most of it fits in free-tier accounts.
| Build | Time | What you'll have at the end |
|---|---|---|
| Implement zero-trust security | 4-5 hours | Identity-aware access, no-implicit-trust networking |
Each phase of Security from Scratch also ends with a small "Try it" exercise you can do in under an hour.
Builds on the sibling sites¶
Most security work happens on top of a real system, so these builds from the other Zero to Hero sites make good practice targets. Build one, then harden it:
- Deploy a 3-tier app (Cloud Zero to Hero) - then lock down its network paths and IAM roles
- Build a CI/CD pipeline (Cloud Zero to Hero) - then add secret scanning and dependency checks
- Set up a monitoring stack (Cloud Zero to Hero) - then alert on suspicious logins
- Build a RAG pipeline (AI Zero to Hero) - then try to break it with prompt injection
Related¶
- Concepts - the "why" behind each pattern
- Architecture patterns - reference designs each build follows
- Topic indexes - all four pillars per subject
- Labs by certification - which build backs which exam
Which lab for which cert¶
Each lab maps to the certs it exercises. The reverse index lives in labs-by-cert.md.