AWS Advanced Security: SecOps Automation for the cloud

Name: AWS Advanced Security: SecOps Automation for the cloud
Rating: 4.6 (1097 reviews)

100% Hands-On | Learn to secure applications on AWS. Defend against threats DDoS Intrusions Vulnerabilities

Created by. Kumar .

Last updated 8/2020

English

English [Auto],Spanish [Auto],

What you'll learn

AWS Advanced Security use-cases
Advanced Data Protection in AWS
Respond to security incidents with ease
AWS Compliance Controls using Automation
Security Best Practices
Proactively defend against security threats

Course content

8 sections • 40 lectures • 4h 46m total length

Welcome to 'AWS Cloud Security: Proactive Way' Course4:52

AWS Config: What Is It?1:07
AWS Config provides near real-time inventory and configuration management across accounts with unified dashboard; track changes, relationships, and PCI or HIPAA compliance, and enable auto remediation via rules and Lambda.
AWS Config: How It Works?1:42
AWS Config: Introduction to Config Rules2:11
AWS Config: How to configure Config Rules4:33
AWS Config: Identify Non Compliant Rules & Resources2:42
Learn how AWS Config identifies non-compliant rules and resources, tracks resource timelines and configuration changes, and guides remedial actions to enforce encryption, restricted access, and secure configurations.
AWS Config: Introduction to Advanced Querying1:18
Explore AWS config advanced queries to dynamically assess resource compliance across EC2 instances and accounts with sql-like queries, using Amazon's sample queries in the Advanced Query dashboard for action.
AWS Config: Advanced Querying In Action3:16
Master AWS Config advanced querying to assess resource compliance, identify non-compliant AMIs and instances, and automate results with Lambda-driven dashboards and API-backed automation for SecOps.
AWS Config: Introduction to Multi Account Aggregators2:13
Explore AWS Config aggregators to centralize compliance rules across multiple accounts and organization units, enabling a single dashboard to monitor resource compliance in dev, test, and prod.
Learn how to aggregate compliance status in AWS4:06
Configure an aggregator to pull compliance data from multiple AWS accounts into a master account, using individual accounts or a comma-separated list, and view the aggregated dashboard across regions.

Introduction to Auto Remediation2:39
Automatically Enforce S3 Bucket Versioning7:23
Automate S3 bucket versioning enforcement with auto-remediation in AWS SecOps, deploying a CloudFormation template to enable versioning on non-compliant buckets and update compliance status.
Automatically Enforce S3 Bucket Encryption6:50
Automate enforcement of S3 bucket encryption by default via a periodic config rule and auto-remediation, using CloudFormation to deploy the rule, IAM roles, and AES-256 encryption settings.
Automatically Enforce 'No Public IPs for EC2 Instances' Policy5:26
Automatically Enforce AMI ID Compliance for all EC2 Instances6:40
Automatically Enforce compliance to AMI ID by Tags for all EC2 Instances7:00
Enforce ec2 compliance by ensuring AMIs carry the DevSecOpsApproved tag; an AWS Config rule and CloudFormation template automatically stops instances using unapproved AMIs.
Compliance Best Practices & Tribal Knowledge - commonly used rules7:11
Explore common AWS security rules for S3, EC2, and IAM, including password policies, MFA, access key rotation, restricted SSH, S3 public access blocks, EBS encryption, and automated remediation.
How to setup custom compliance rules?2:48
Monitor & Flag Unused IAM Roles using Config Custom Rules12:25
Configure a custom AWS Config rule to identify unused IAM roles by evaluating last-use data over 30 days, flag non-compliant roles, and notify owners for potential quarantine or deletion.
Monitor & Flag Users With Excessive Privileges10:07
Identify IAM users with excessive privileges by evaluating star actions and resources across inline and managed policies, using an AWS Config rule and a LaMDA function, via the rule development kit.

Automatically Remediate AWS Cloutrail Disabling: Monitor, Alert, ReEnable8:04
Automate cloud security by detecting CloudTrail disablement, alerting SecOps with GuardDuty and Security Hub findings, and auto re-enabling logging via CloudWatch SNS Lambda, guided by a CloudFormation template.
Monitor & Automatically Revoke Unintended IAM Access11:17
Automate remediation of unintended IAM access by monitoring CloudTrail with EventBridge and Lambda, and automatically deny and revoke privileges for unauthorized users via a deny policy.
Automatically Remove Unused Security Groups6:37
Proactively monitor & fix bad or overly permissive S3 Object ACLs11:11
Monitor and automatically remediate overly permissive S3 object ACLs using CloudTrail, EventBridge, and Step Functions, with SecOps notifications and a CloudFormation-based deployment for rapid, compliant remediation.
Proactively monitor and fix bad or overly permissive S3 Bucket Policies16:59
Monitor and fix bad S3 bucket policies using a security automation workflow with CloudTrail, EventBridge, Step Functions, and AWS Config to evaluate and remediate policy changes.
Proactively monitor and respond to failed SSH logins to EC2 Instances14:45
Monitor ssh logins on EC2 with the CloudWatch agent, create custom metrics for invalid users and keys, and auto-quarantine compromised instances via Lambda, Step Functions, and SecOps alerts.
Automatically rotate EC2 SSH keys for ALL your instances reliably6:07
Rotate EC2 SSH keys across a large fleet reliably with AWS SSM, using tag-driven selection, IAM roles, and monitored output to S3 or CloudWatch.
Proactively Block S3 Public Access At Scale5:31
Block public access at scale using the S3 Block Public Access feature, applying account-wide controls to deny new public buckets or objects while leaving existing public objects accessible.
Attribute Based Access Control: Proactively Restrict S3 Access based on UserTags15:41
Discover attribute based access control for S3, where user, team, and project tags govern access by matching IAM roles.
Attribute Based Access Control: Proactively Restrict Access To EC2 Based On Tags15:37
apply attribute based access control for ec2 by matching resource tags with team and project tags, using condition keys and iam policies, deployed via cloud formation or cdk.

Learn how to create fine grained permissions like a PRO7:46
Master fine-grained AWS IAM policies using the policy generator and policy simulator to grant a single S3 bucket access, test with simulations, and deploy confidently.
Use AWS Secrets Manager to secure database credentials and retrieve from lambda11:59
Store database credentials securely with AWS Secrets Manager, retrieve them via a Lambda function, and rotate secrets automatically every 30 days using KMS encryption and IAM access controls.
Use an outbound VPC proxy for domain whitelisting and content filtering14:45
Use AWS IAM Access Analyzer to Identify Unintended Resource Access7:43
Automatically respond to DDoS Attacks with Web Application Firewall(WAF)9:06
Protect your api gateway with a web application firewall and rate-based rules to block ddos traffic from offending ips. Configure managed and custom rules to ensure availability for legitimate users.
Detect EC2 Instance Credential Abuse5:08
Automatically respond to EC2 Instance Credential Abuse - Part 01 of 0210:00
Automatically respond to EC2 Instance Credential Abuse - Part 02 of 0211:16

Requirements

Good Knowledge of AWS Cloud
Desire to learn and be curious about security

Description

Learn now how to protect your data, and manage your infrastructure in a secure way. There are many useful and powerful features that a customer can use to protect themselves against security incidents & data breaches.

Your course instructor[s] are AWS Experts with 16+ years of experience in Cloud & Security.

You will learn about how AWS Security services can be combined to deliver cloud security. All the examples demonstrated are from real-world customer use-cases and are being used in production. The automation templates & scripts provided can be modified by any user to get themselves familiar with these services and deploy in their customer environments

At the end of this course, you will be able to confidently able to answer the following questions,

How to simplify compliance auditing, security analysis, change management, and operational troubleshooting
How to assess, audit, and automate the remediation of non compliant resources configurations.
Write custom compliance rules to meet organisational needs
How to automatically respond to security incidents.
How to effectively respond to and mitigate the potential impact of security incidents
You will learn advanced techniques to prepare and respond to security events.
What are different security services offered by AWS?
How to use the AWS security services to comply to a frameworks(for example NIST)?

The lectures range from simple security features to really complex event driven systems to keep your AWS accounts in compliance based on a set of rules. All the scripts and commands are on our GitHub repository. You can fork them and try it in your own accounts & laptops.

Who this course is for:

Users who wants to gain deep security insights related to AWS
Users who want to learn about Security Best Practices
Users who wants to know how to respond to security incidents automatically
Users who wants to learn automation

AWS Advanced Security: SecOps Automation for the cloud

What you'll learn

Explore related topics

Course content

Course Introduction1 lecture • 5min

Detective Controls: Introduction9 lectures • 23min

Reactive Controls: Automatically Remediate Non Compliant Resources10 lectures • 1hr 8min

Proactive Security Controls10 lectures • 1hr 52min

Proactive Security Controls: Taking it to the next level8 lectures • 1hr 18min

Next Steps: Assignment0

Resources1 lecture • 1min

Additional Reading1 lecture • 1min

Requirements

Description

Who this course is for: