Tools and first-week setup

The tools a Cloud Security intern uses and how to set up your workspace in week one.

These are the main tools for Cloud Security tasks. You do not need all of them on day one; the Level 1 tasks tell you when to install each one.

Set up your workspace

Create a free GitHub account if you do not have one, with a professional username, and set up your LinkedIn profile: every task is submitted with a LinkedIn post.
Create one repository for the internship, for example cloud-security-internship, with a README that says who you are and what the repo holds.
Keep one folder per task, named with the task number and title, so mentors find your work quickly.
Commit small changes every day with clear messages. Your daily work report uses these commits as proof.
Never commit passwords, API keys or personal data. Put secrets in a .env file and add it to .gitignore.

Task	What to do
Shared responsibility	In a repo named cloud-security-internship, explain the shared responsibility model for IaaS, PaaS and SaaS with examples from AWS, Azure or GCP.
Secure the root account	On a free cloud account, turn on MFA for the root or owner account, create an admin user and set a billing alert. Screenshot each step (hide account IDs).
IAM least privilege	Create a user who can only read one storage bucket. Prove they cannot list other buckets or delete objects.
Read an IAM policy	Explain 3 IAM policies line by line (Effect, Action, Resource, Condition) and fix one that grants too much.