AWS Administration: Security Operations

Course details

Is your company making a move to the cloud with AWS? And if so, are you curious about how this change will impact your organization's ability to secure applications and end users? If so, then this course is for you. Join instructor Mark Wilkins as he details a variety of powerful AWS security features, explaining what the cloud platform has to offer in the areas of infrastructure security, data protection, and detective controls. Mark goes over services like Amazon Inspector, which allows you to automate the inspection and compliance checking of applications hosted on EC2 instances. He also shares what AWS offers to help you keep your data safe, including data encryption options for storage services, CloudHSM, and Amazon Macie, which allows you to use machine learning to analyze security breaches. Plus, discover how to monitor security with CloudTrail, monitor activity with GuardDuty, manage security with Control Tower, and much more.

Concepts

0. Introduction

01 - Understanding AWS security operations
02 - What you should know

1. Infrastructure Security

03 - AWS Shield - Standard
04 - AWS Shield - Advanced
05 - AWS Web Application Firewall (WAF)
06 - Demo - AWS WAF
07 - Automate compliance with Amazon Inspector
08 - Explore Amazon Virtual Private Cloud
09 - VPC Security groups
10 - Network ACLs
11 - Optimize your environment with Trusted Advisor
12 - Explore VPC endpoints
13 - Demo - VPC Endpoints

2. Data Protection

14 - Data protection in transit and at rest
15 - Data encryption options for storage services
16 - S3 Encryption
17 - Key Management Service
18 - Explore Cloud HSM
19 - Analyze breaches with Amazon Macie
20 - Certificate Manager
21 - Demo - Amazon Macie

3. Detective Controls

22 - Understanding visibility and logging
23 - Monitor security with CloudTrail
24 - Demo - CloudTrail
25 - Challenge - Create a Custom Trail
26 - Solution - Create a Custom Trail
27 - CloudWatch
28 - CloudWatch Logs
29 - CloudWatch Events
30 - VPC Flow Logs
31 - Monitor activity with GuardDuty
32 - Manage security with ControlTower
33 - Lambda and Lambda functions
34 - Simple Notification Services
35 - Explore AWS Config
36 - Demo - Config

Conclusion

37 - Beyond AWS security operations

AWS Administration: Security Operations

Authors

Mark Wilkins