AWS Advanced Security: SecOps Automation for the cloud

Name: AWS Advanced Security: SecOps Automation for the cloud
Rating: 4.6 (1072 reviews)

100% Hands-On | Learn to secure applications on AWS. Defend against threats DDoS Intrusions Vulnerabilities

Created by. Kumar .

Last updated 8/2020

English

English [Auto],Spanish [Auto],

What you'll learn

AWS Advanced Security use-cases
Advanced Data Protection in AWS
Respond to security incidents with ease
AWS Compliance Controls using Automation
Security Best Practices
Proactively defend against security threats

Course content

8 sections • 40 lectures • 4h 46m total length

Welcome to 'AWS Cloud Security: Proactive Way' Course4:52

AWS Config: What Is It?1:07
AWS Config provides near real-time inventory and configuration management across accounts with unified dashboard; track changes, relationships, and PCI or HIPAA compliance, and enable auto remediation via rules and Lambda.
AWS Config: How It Works?1:42
AWS Config: Introduction to Config Rules2:11
AWS Config: How to configure Config Rules4:33
AWS Config: Identify Non Compliant Rules & Resources2:42
AWS Config: Introduction to Advanced Querying1:18
Explore AWS config advanced queries to dynamically assess resource compliance across EC2 instances and accounts with sql-like queries, using Amazon's sample queries in the Advanced Query dashboard for action.
AWS Config: Advanced Querying In Action3:16
AWS Config: Introduction to Multi Account Aggregators2:13
Explore AWS Config aggregators to centralize compliance rules across multiple accounts and organization units, enabling a single dashboard to monitor resource compliance in dev, test, and prod.
Learn how to aggregate compliance status in AWS4:06

Introduction to Auto Remediation2:39
Automatically Enforce S3 Bucket Versioning7:23
Automatically Enforce S3 Bucket Encryption6:50
Automatically Enforce 'No Public IPs for EC2 Instances' Policy5:26
Automatically Enforce AMI ID Compliance for all EC2 Instances6:40
Automatically Enforce compliance to AMI ID by Tags for all EC2 Instances7:00
Enforce ec2 compliance by ensuring AMIs carry the DevSecOpsApproved tag; an AWS Config rule and CloudFormation template automatically stops instances using unapproved AMIs.
Compliance Best Practices & Tribal Knowledge - commonly used rules7:11
How to setup custom compliance rules?2:48
Monitor & Flag Unused IAM Roles using Config Custom Rules12:25
Monitor & Flag Users With Excessive Privileges10:07
Identify IAM users with excessive privileges by evaluating star actions and resources across inline and managed policies, using an AWS Config rule and a LaMDA function, via the rule development kit.

Automatically Remediate AWS Cloutrail Disabling: Monitor, Alert, ReEnable8:04
Automate cloud security by detecting CloudTrail disablement, alerting SecOps with GuardDuty and Security Hub findings, and auto re-enabling logging via CloudWatch SNS Lambda, guided by a CloudFormation template.
Monitor & Automatically Revoke Unintended IAM Access11:17
Automatically Remove Unused Security Groups6:37
Proactively monitor & fix bad or overly permissive S3 Object ACLs11:11
Monitor and automatically remediate overly permissive S3 object ACLs using CloudTrail, EventBridge, and Step Functions, with SecOps notifications and a CloudFormation-based deployment for rapid, compliant remediation.
Proactively monitor and fix bad or overly permissive S3 Bucket Policies16:59
Proactively monitor and respond to failed SSH logins to EC2 Instances14:45
Automatically rotate EC2 SSH keys for ALL your instances reliably6:07
Proactively Block S3 Public Access At Scale5:31
Attribute Based Access Control: Proactively Restrict S3 Access based on UserTags15:41
Attribute Based Access Control: Proactively Restrict Access To EC2 Based On Tags15:37
apply attribute based access control for ec2 by matching resource tags with team and project tags, using condition keys and iam policies, deployed via cloud formation or cdk.

Learn how to create fine grained permissions like a PRO7:46
Master fine-grained AWS IAM policies using the policy generator and policy simulator to grant a single S3 bucket access, test with simulations, and deploy confidently.
Use AWS Secrets Manager to secure database credentials and retrieve from lambda11:59
Use an outbound VPC proxy for domain whitelisting and content filtering14:45
Use AWS IAM Access Analyzer to Identify Unintended Resource Access7:43
Automatically respond to DDoS Attacks with Web Application Firewall(WAF)9:06
Detect EC2 Instance Credential Abuse5:08
Automatically respond to EC2 Instance Credential Abuse - Part 01 of 0210:00
Automatically respond to EC2 Instance Credential Abuse - Part 02 of 0211:16

Requirements

Good Knowledge of AWS Cloud
Desire to learn and be curious about security

Description

Learn now how to protect your data, and manage your infrastructure in a secure way. There are many useful and powerful features that a customer can use to protect themselves against security incidents & data breaches.

Your course instructor[s] are AWS Experts with 16+ years of experience in Cloud & Security.

You will learn about how AWS Security services can be combined to deliver cloud security. All the examples demonstrated are from real-world customer use-cases and are being used in production. The automation templates & scripts provided can be modified by any user to get themselves familiar with these services and deploy in their customer environments

At the end of this course, you will be able to confidently able to answer the following questions,

How to simplify compliance auditing, security analysis, change management, and operational troubleshooting
How to assess, audit, and automate the remediation of non compliant resources configurations.
Write custom compliance rules to meet organisational needs
How to automatically respond to security incidents.
How to effectively respond to and mitigate the potential impact of security incidents
You will learn advanced techniques to prepare and respond to security events.
What are different security services offered by AWS?
How to use the AWS security services to comply to a frameworks(for example NIST)?

The lectures range from simple security features to really complex event driven systems to keep your AWS accounts in compliance based on a set of rules. All the scripts and commands are on our GitHub repository. You can fork them and try it in your own accounts & laptops.

Who this course is for:

Users who wants to gain deep security insights related to AWS
Users who want to learn about Security Best Practices
Users who wants to know how to respond to security incidents automatically
Users who wants to learn automation

AWS Advanced Security: SecOps Automation for the cloud

What you'll learn

Explore related topics

Course content

Course Introduction1 lecture • 5min

Detective Controls: Introduction9 lectures • 23min

Reactive Controls: Automatically Remediate Non Compliant Resources10 lectures • 1hr 8min

Proactive Security Controls10 lectures • 1hr 52min

Proactive Security Controls: Taking it to the next level8 lectures • 1hr 18min

Next Steps: Assignment0

Resources1 lecture • 1min

Additional Reading1 lecture • 1min

Requirements

Description

Who this course is for: