Where can I listen to this podcast?

This podcast is available on 4 platforms including Apple Podcasts, Spotify, and more. You can also use the RSS feed directly.

Does this podcast accept guests?

No, this podcast does not typically feature guests.

Certified: The GIAC GPCS Audio Course

Claim This Podcast

by Jason Edwards

61 episodes

Updated Daily

Accepts GuestsHas Sponsors

Podcast Overview

The podcast delivers practical cloud security guidance for professionals who have to ship real systems on real timelines. Episodes focus on the moves that prevent costly incidents: reducing accidental exposure, tightening identity and permissions, hardening serverless triggers, securing managed platforms, and building durable defaults that survive updates and team changes. The approach is technical and operational, with clear explanations that translate directly into repeatable patterns. Each topic is designed to help you think like both a defender and an architect: what attackers exploit first, where misconfigurations hide, and how to constrain blast radius without slowing delivery. If you want deeper reference material, a companion book expands the same concepts in a structured format, and a flash cards book supports fast review and retention for day-to-day work, interviews, and certification prep.

Language

🇺🇲

Publishing Since

2/10/2026

View on Apple Podcasts RSS Feed

1 verified contact email on file for Certified: The GIAC GPCS Audio Course

Pitch yourself as a guest, propose sponsorships, or reach out directly to the host.

See contact details

Recent Episodes

February 10, 2026

Welcome to Certified: The GIAC GPCS Audio Course

The podcast delivers practical cloud security guidance for professionals who have to ship real systems on real timelines. Episodes focus on the moves that prevent costly incidents: reducing accidental exposure, tightening identity and permissions, hardening serverless triggers, securing managed platforms, and building durable defaults that survive updates and team changes. The approach is technical and operational, with clear explanations that translate directly into repeatable patterns.Each topic is designed to help you think like both a defender and an architect: what attackers exploit first, where misconfigurations hide, and how to constrain blast radius without slowing delivery. If you want deeper reference material, a companion book expands the same concepts in a structured format, and a flash cards book supports fast review and retention for day-to-day work, interviews, and certification prep.

February 10, 2026

Episode 60 — Secure serverless event triggers so trusted inputs cannot be quietly replaced

This episode explains why event triggers are a primary trust boundary in serverless architectures, because whoever controls the trigger often controls when and how your function executes, and the GPCS exam expects you to reason about trusted inputs and integrity. You’ll define triggers broadly—HTTP endpoints, message queues, storage events, schedules, and integration events—and then map how trigger misconfiguration can allow unauthorized invocation, replay, or substitution of “trusted” events with attacker-controlled payloads. We’ll walk through a scenario where a function is designed to run only on internal events, but a trigger configuration change or permissive access policy allows external actors to invoke it, leading to data access through the function’s permissions. You’ll learn best practices such as authenticating and authorizing invocation, restricting who can modify trigger configuration, validating event source identity, and logging both the trigger source and downstream actions so investigations can prove cause and effect. The goal is to ensure the function’s execution path remains trustworthy even as teams evolve event routing over time. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.

February 10, 2026

Episode 59 — Prevent serverless privilege overreach with tight identity and resource scopes

This episode focuses on least privilege for serverless workloads, because functions often start small but accumulate permissions as teams add features, and the GPCS exam regularly tests whether you can spot privilege overreach hidden behind “it’s just a function.” You’ll define function identity, permission scope, and resource boundaries, then learn how to map each function’s actions to the smallest set of allowed operations on the smallest set of resources. We’ll cover common overreach patterns such as granting broad access to storage, messaging, or key services “for convenience,” permissions that allow role assumption into stronger identities, and policies that include wildcard actions or resources that expand over time. A scenario follows a function that only needs to read from one queue and write to one database, but is given sweeping permissions that enable lateral movement and data access across environments; you’ll tighten identity scope and validate the function still performs its job while escalation paths fail. This prepares you for exam questions that ask for the best permission design and for real engineering reviews where security must not break reliability. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.

61 total episodes available

Deep-dive analytics for Certified: The GIAC GPCS Audio Course

Frequently asked questions

Have a different question and can't find the answer you're looking for? Reach out to our support team by sending us an email and we'll get back to you as soon as we can.

What is Certified: The GIAC GPCS Audio Course?: The podcast delivers practical cloud security guidance for professionals who have to ship real systems on real timelines. Episodes focus on the moves that prevent costly incidents: reducing accidental exposure, tightening identity and permissions, hardening serverless triggers, securing managed platforms, and building durable defaults that survive updates and team changes. The approach is technical and operational, with clear explanations that translate directly into repeatable patterns.

Each topic is designed to help you think like both a defender and an architect: what attackers exploit first, where misconfigurations hide, and how to constrain blast radius without slowing delivery. If you want deeper reference material, a companion book expands the same concepts in a structured format, and a flash cards book supports fast review and retention for day-to-day work, interviews, and certification prep.
How often does this podcast release new episodes?: This podcast updates daily.
Where can I listen to this podcast?: This podcast is available on 4 platforms including Apple Podcasts, Spotify, and more. You can also use the RSS feed directly.
Does this podcast accept guests?: No, this podcast does not typically feature guests.

Legal Disclaimer

Pod Engine is not affiliated with, endorsed by, or officially connected with any of the podcasts displayed on this platform. We operate independently as a podcast discovery and analytics service.

All podcast artwork, thumbnails, and content displayed on this page are the property of their respective owners and are protected by applicable copyright laws. This includes, but is not limited to, podcast cover art, episode artwork, show descriptions, episode titles, transcripts, audio snippets, and any other content originating from the podcast creators or their licensors.

We display this content under fair use principles and/or implied license for the purpose of podcast discovery, information, and commentary. We make no claim of ownership over any podcast content, artwork, or related materials shown on this platform. All trademarks, service marks, and trade names are the property of their respective owners.

While we strive to ensure all content usage is properly authorized, if you are a rights holder and believe your content is being used inappropriately or without proper authorization, please contact us immediately at hey@podengine.ai for prompt review and appropriate action, which may include content removal or proper attribution.

By accessing and using this platform, you acknowledge and agree to respect all applicable copyright laws and intellectual property rights of content owners. Any unauthorized reproduction, distribution, or commercial use of the content displayed on this platform is strictly prohibited.