CLASS Events Schedule

Date: July 13 – Aug. 7
Time: 4 weeks; 2 hours per week with weekly cohort check-in calls 
Cost: $250 for CICP subscribers; $350 for Internet2 members; $450 for non-members

Develop a foundational understanding of AWS security features and services that help protect cloud environments.

During this course, security engineers, IT professionals, and Cloud administrators will learn how security in AWS differs from traditional on-premises security. Participants will explore core protection concepts, including AWS governance, identity and access management, resource policies, network security, S3 security, and encryption with AWS Key Management Service. 

Hands-on labs will provide practical experience with IAM, network security controls, and more.

Instructor: James Smith, Associate Director of Cloud Engineering Services, University of Notre Dame

Learn More

Date: July 14
Time: 2 – 3:30 p.m. ET
Cost: Free
Instructor: Greg Nawrocki, Director of Customer Engagement at Globus, University of Chicago

Explore Globus as a platform for research data management with an emphasis on its role in moving, managing, and preserving research data across diverse storage and compute environments. 

Participants will learn how Globus fits into the research data lifecycle — from acquisition and analysis to archiving and sharing — and how it supports reliability, integrity, and scalability at the institutional level.

Sign Up

Date: July 15-16
Time: 1-5 p.m. ET each day
Cost: $100 for CICP subscribers; $150 for Internet2 members; $200 for non-members

This workshop is designed for research IT professionals and Research Computing Directors who support cloud-enabled research but don’t have a deep AWS background. 

Attendees will build a practical mental model for how AWS works — compute, storage, identity, and cost — and reinforce it through three hands-on labs. Learn the basics of what the cloud offers researchers, different data storage styles, and how identity and access management permissions work. This workshop concludes with a deep dive into cost governance using a real-world research scenario.

Instructor: Kevin Murakoshi, Principal Solutions Architect, Amazon Web Services

Learn More

Date: July 21
Time: 12 – 4 p.m. ET
Cost: $100 for CICP subscribers; $150 for Internet2 members; $200 for non-members
Instructors: Ananya Ravipati and Tim Manik, Internet2

In this workshop, you will learn how to set up and manage a containerized application catalog to track internal tools with a user interface to view and edit the catalog.

Together, we will review containerization fundamentals, multi-container orchestration with Docker Compose, and what it takes to containerize and deploy an enterprise application. This workshop is right for you if you’re looking to containerize existing applications in your enterprise.

Learn More

Date: July 22
Time: 1-5 p.m. ET
Cost: $50 for CICP subscribers; $75 for Internet2 members; $100 for non-members

This half-day workshop provides a practical foundation in AWS for IT professionals whose primary role is not cloud engineering. 

Attendees will get hands-on experience with the core building blocks of AWS: compute (EC2), storage (S3, EBS), networking fundamentals, and identity and access management (IAM). This session serves as the common prerequisite for both the Linux and Windows operations tracks.

Instructor: Kevin Murakoshi, Principal Solutions Architect, Amazon Web Services

Learn More

Date: July 23
Time: 1-5 p.m. ET
Cost: $50 for CICP subscribers; $75 for Internet2 members; $100 for non-members

If you’ve ever inherited a cloud environment with no SSH keys, a fleet you can’t easily patch, or a maintenance window that runs but changes nothing, then this workshop is for you. Designed for Linux sysadmins who are new to AWS, this half-day workshop replaces the old mental model (SSH in, run commands, patch manually) with the AWS Systems Manager toolkit. 

You’ll learn how to connect to instances without opening port 22, run commands and automation runbooks across an entire fleet by tag, configure patch baselines and maintenance windows, and diagnose the silent failures that block production patching. The workshop closes with a guided tour of EC2 Image Builder and how golden AMIs fit into a modern patching strategy. 

Instructor: Kevin Murakoshi, Principal Solutions Architect, Amazon Web Services

Learn More

Date: July 29-30
Time: 1-5 p.m. ET both days
Cost: $100 for CICP subscribers; $150 for Internet2 members; $200 for non-members

Designed for learners with little to no prior experience in data analytics or Google Cloud, this workshop covers the basics of data analysis, including data collection, storage, exploration, visualization, and sharing. Participants will also be introduced to Google Cloud’s data analytics tools and services.

Learn through video lectures, demos, quizzes, and hands-on labs that demonstrate how to transform raw data into impactful visualizations and dashboards.

This workshop is recommended for beginners, data analysts, and data visualization professionals.

Instructor: Tom Tipuric, Google Cloud Authorized Trainer

Learn More

Date: Aug. 5-6
Time: 1-5 p.m. ET each day
Cost: $100 for CICP subscribers; $150 for Internet2 members; $200 for non-members

Researchers and research computing data professionals often inherit cloud environments or run into problems they weren’t trained to solve. 

This two-day workshop addresses the most common issues encountered in research cloud environments, including debugging identity and access management policies and permission failures; configuring and responding to budget alerts; investigating security alerts; troubleshooting network connectivity; and using CloudTrail and VPC Flow Logs to diagnose problems. A working knowledge of AWS fundamentals (AWS Research for Non-Majors – Basics or equivalent) is recommended.

Instructor: Kevin Murakoshi, Principal Solutions Architect, Amazon Web Services

Learn More

Date: Aug. 11
Time: 2 – 3:30 p.m. ET
Cost: Free
Instructor: Lee Liming, Director of Professional Services at Globus, University of Chicago

Dive into the sharing and access control capabilities of Globus, focusing on how to create flexible, secure collaboration spaces for research data. 

Participants will learn how mapped and guest collections work, how to configure fine-grained data access permissions for individuals and groups, and how to use Globus Groups and institutional identities to manage access at scale.

Sign Up

Date: Aug. 18
Time: 1-2 p.m. ET
Cost: Free

The Internet2 CLASS program is facilitating a comprehensive webinar and workshop series to help your institution navigate secure research and compliance in the cloud.

Phase 3: Technical Implementation – VDI as a Security Boundary

Virtual Desktop Infrastructure (VDI) offers a powerful approach to establishing security boundaries in regulated research environments. This webinar session explores practical experience implementing VDI across cloud and on-premises platforms supporting regulated research. 

Attendees will learn where VDI fits within the broader secure research environment architecture and explore implementation strategies, including encryption, VPN integration, and key security trade-offs. Our speakers will provide conceptual and technical insights for institutions evaluating VDI as a component of their compliance strategy.

Key Takeaways:

• Describe the role of VDI as a security boundary within a secure research environment architecture, and how it supports compliance with frameworks such as NIST SP 800-171 and CMMC
• Identify key security considerations — including encryption, VPN, and access controls — when deploying VDI for regulated research workloads
• Evaluate trade-offs in cost, complexity, and security posture when selecting a VDI platform for regulated research

Speakers:

• Jason Armbruster, CLASS Consultant for Internet2
  • Associate Deputy Director of ACCESS Support at the University of Colorado Boulder
• Sean Kelly, Senior Software Engineer at Purdue University

Register Today

Date: Aug. 19-20
Time: 1-5 p.m. ET each day
Cost: $100 for CICP subscribers; $150 for Internet2 members; $200 for non-members

Security teams generate a lot of alerts. This workshop helps make sense of them. 

Get introduced to AWS’s core detection services. Learn how they work, what they catch, and how they feed into one another. Explore AWS tools Security Hub and Inspector — the two services most directly relevant to compliance posture and vulnerability management on campus. 

Participants will learn how to enable and configure detection across their environment, understand what the findings mean and how to prioritize them, and gain a clear picture of their security posture.

Instructor: Kevin Murakoshi, Principal Solutions Architect, Amazon Web Services

Learn More

Date: Aug. 27
Time: 10:30 a.m. – 5:30 p.m. ET
Cost: Free for CICP subscribers ($50 no-show fee deducted from voucher); $50 for NET+ GCP subscribers; $150 for Internet2 members; $200 for non-members

This one-day workshop focuses on the critical administrative aspects of Google Cloud, including folder structure, organizational policies, project provisioning, role management, billing, credit management, and more.

Participants will gain hands-on experience with key GCP management tools and learn best practices for configuring and maintaining their institution’s Google Cloud environment.

This workshop is recommended for intermediate and advanced cloud engineers, cloud platform administrators, and cloud enablement teams.

Instructor: Tom Tipuric, Google Cloud Authorized Trainer

Learn More

Date: Sept. 1
Time: 1-2:30 p.m. ET
Cost: Free

The Internet2 CLASS program is facilitating a comprehensive webinar and workshop series to help your institution navigate secure research and compliance in the cloud.

Phase 3: Technical Implementation – Compliance-Aware Data Management Using Globus

Learn about the sharing and access control capabilities of Globus that help institutions meet compliance requirements for research data sharing and collaboration. See how features such as time-limited permissions, sharing policies, and carefully scoped guest collections can be used to enforce least privilege and controlled access to data. We will also cover data classification and how to design sharing workflows that respect regulatory and contractual constraints.

Key Takeaways:

• Support compliance-oriented data sharing with Globus sharing capabilities
• Map Globus configurations to NIH Data Management and Sharing Policy and other federal data sharing requirements
• Design data sharing workflows that respect sensitivity, institutional review board constraints, and data use agreements

Speaker:

• Vas Vasiliadis, Chief Customer Officer at Globus

Register Today

Date: Oct. 6
Time: 2 – 3:30 p.m. ET
Cost: Free
Instructor: Lev Gorenstein, Solutions Architect at Globus, University of Chicago

This session provides a practical introduction to Globus Connect Server for system administrators. Participants will learn how to install GCS, register an endpoint, and configure basic storage gateways and mapped collections for POSIX-based campus or lab storage systems.

Explore essential configuration files and concepts, discuss firewall and network considerations, and learn how to create and test a simple endpoint suitable for end-user data transfers and basic sharing.

Sign Up

Date: Oct. 14-15
Time: 1-5 p.m. ET each day
Cost: $100 for CICP subscribers; $150 for Internet2 members; $200 for non-members

The third installment in the AWS Security for Non-Majors series puts detection into action. Over two days, participants will work through a selection of realistic incident response scenarios drawn from AWS CIRT’s publicly released workshop library. 

Attendees will practice investigating alerts, containing incidents, collecting evidence, and remediating compromised resources. Build the muscle memory needed to respond confidently when something goes wrong.

Instructor: Kevin Murakoshi, Principal Solutions Architect, Amazon Web Services

Learn More

Date: Oct. 21-22
Time: 1-5 p.m. ET both days
Cost: $100 for CICP subscribers; $150 for Internet2 members; $200 for non-members

Learn how to use various tools in Google Cloud to take in, manage, and leverage your data to derive insights in your research. 

Participants will be introduced to tools used by researchers on Google Cloud and will learn how to absorb both unstructured and structured data into Cloud Storage and BigQuery, respectively. 

See how to curate data and understand costs in Google Cloud and leverage notebook environments and other Google Cloud tools for descriptive and predictive analysis.

This workshop is recommended for beginners on Google Cloud, as well as researchers, research lab staff, and research computing data professionals.

Instructor: Tom Tipuric, Google Cloud Authorized Trainer

Learn More

Date: Nov. 11-12
Time: 1-5 p.m. ET each day
Cost: $100 for CICP subscribers; $150 for Internet2 members; $200 for non-members

Has your security team asked you to inspect cloud traffic the same way you do on-prem — and you’re not quite sure how that works in AWS? This workshop is for you. 

In AWS, traffic inspection works differently. The cloud routing model requires a new approach to get appliances inline without changing how your applications behave. 

This workshop covers the right way to do it using AWS Gateway Load Balancer and gives you three hours of hands-on lab time to build it yourself. No prior experience with the inspection tools is required. This course is recommended for network engineers and security practitioners with basic AWS experience.

Instructor: Kevin Murakoshi, Principal Solutions Architect, Amazon Web Services

Learn More

Did you miss a CLASS event? View the listing of our past events.