Let AWS Solutions Architects start you on your journey to secure your cloud resources. Data security is on the forefront of everyone’s mind these days, with data breaches, denial of service attacks, ransomware and malware being common news stories.
Class Deals by MOOC List - Click here and see EdX's Active Discounts, Deals, and Promo Codes.
In this course two of Amazon Web Services’ Solutions Architects will provide you with a foundational understanding of cloud security, compliance and the AWS shared responsibility model. They will then discuss more technical content by looking at various security controls such as identity and access management services, directory services, network isolation and connectivity options, auditing, monitoring, encryption and managing secrets.
This course will cover a number of AWS services, such as Amazon VPC, Amazon CloudWatch, AWS CloudTrail, Amazon GuardDuty, AWS Security Hub, Amazon S3, Amazon EBS, Amazon EC2, and AWS Secrets Manager, among others.
Several demonstrations are provided throughout the course to provide a practical example of the concepts that have been discussed. Class discussions will provide an opportunity for you to interact with fellow students as well as AWS training staff.
What you'll learn
- How the AWS Shared Responsibility Model is used to differentiate between security of the cloud and security in the cloud
- How to use network isolation to protect cloud resources
- How to audit and monitor applications using services such as Amazon CloudWatch, Amazon GuardDuty and AWSSecurity Hub
- The difference between encryptionof data at rest and data in transit
- How to protect compute resources
- How to manage secrets
Syllabus
Week 1
Introduction to Week 1
The AWS Shared Responsibility Model
Compliance
Creating an Account
Multiple Accounts
Identity & Access Services (part 1)
Identity & Access Services (part 2)
Week 2
Introduction to Week 2
Network Isolation
Network Isolation with VPC
VPC Endpoint and Private Link
Detective Controls
Auditing
Monitoring CloudWatch and CloudWatch Logs
Monitoring Guard Duty and Security Hub
Demo: AWS Config
Week 3
Introduction to Week 3
Data Types
Encryption in Transit
Encryption at Rest
Databse Encryption
Amazon S3
EBS Encryption
Demo: Cross Acount Access to S3
Week 4
Introduction to Week 4
Protecting Compute Resources
Protecting the Endpoint
Managing Secrets
Demo: AWS Secrets Manager
The Well-Architected Tool
