Course Description

This course covers fundamental AWS cloud security concepts, including AWS access control, data encryption methods, and how network access to your AWS infrastructure can be secured. We will address your security responsibilities in the AWS cloud and provide a brief introduction to the different security-oriented AWS services available.

Objectives

• Assimilate Identify security benefits and responsibilities of using the AWS Cloud 
• Describe the access control and management features of AWS 
• Explain the available methods to encrypting data at rest and in transit 
• Describe how to secure network access to your AWS resources 
• Determine which AWS services can be used for monitoring and incident response

Audience

• Security IT business-level professionals interested in cloud security practices 
• Security professionals with minimal to no working knowledge of AWS

Prerequisites

There are no prerequisites for this course.

Content

Module 1: Security on AWS

• Security design principles in the AWS Cloud
• AWS Shared Responsibility Model

Module 2: Security OF the Cloud

• AWS Global Infrastructure
• Data center security
• Compliance and governance

Module 3: Security IN the Cloud – Part 1

• Identity and access management
• Data protection essentials
• Lab 01 – Introduction to security policies

Module 4: Security IN the Cloud – Part 2

• Securing your infrastructure
• Monitoring and detective controls
• Lab 02 – Securing VPC resources with Security Groups

Module 5: Security IN the Cloud – Part 3

• DDoS mitigation
• Incident response essentials
• Lab 03 – Remediating issues with AWS Config Conformance Packs

Module 6: Course Wrap Up

• AWS Well-Architected tool overview
• Next Steps