AWS Security Groups and Network ACLs

Name: AWS Security Groups and Network ACLs
Rating: 4.5 (29 reviews)

Understanding and Applying AWS Security Groups and Network Access Control Lists (ACLs)

Last updated 3/2020

English

What you'll learn

Cover AWS security groups and ACLs in depth.
Get a clear explanation of inbound/outbound traffic flows.
Apply Security Groups and ACLs to a three-tier architecture design
You will learn best practices for implementing security groups and ACLs.
You will learn a proven technique for analyzing complex situations that may come up on certification exams.
Learn how to analyze and answer sample exam questions

5 sections • 16 lectures • 1h 4m total length

Introduction2:11
We'll review the intended audience and prerequisites. You'll get a brief overview of the course material and review a quick biography of the course presenter.
Background2:08
In this lecture we will discuss the background that motivates the use of security groups and ACLs. If you are familiar with this topic you can skip ahead to the next lecture where we dive right into the technical details.
AWS Security Groups and Network ACLs3:38
In this lecture we will cover a quick summary of security groups and access control lists. We will deal with each topic in depth in the rest of this course.

AWS Security Groups - Concepts5:01
In this lecture we will discuss basic inbound/outbound concepts for security groups. You will learn what the term stateful means. You will learn how security groups are attached to hosts and what it means to attach a security group to multiple hosts with an example of an inbound rule.
Basic Security Group Operations4:53
This video will demonstrate basic security group operations. If you are familiar with the AWS Console and Security Group basic operations, you can skip ahead to the end of this video.
The Default Security Group1:53
You will learn about the default security group and how to make it more secure.
Demo of Security Groups4:08
In this lecture, we will illustrate how security groups can be set up to provide least privilege access in a typical client-server architecture.
For the demonstration, we will have two EC2 instances each with their own security group. The goal is to pull a file from server B down to server A, over port 8080. We will use a simple web server on B that can serve up the files on a specified port.
Security Groups in Depth7:44
All about multiple security groups attached to a host, security groups as source/destination, self as source/destination, and two worked examples illustrating these concepts. You will also learn how to attach multiple security groups to a host.

AWS Network Access Control Lists (ACLs)2:45
You will gain an introduction to AWS network access control lists (ACLs) followed by an in depth knowledge of how they are applied. You will also see how network ACLs and security groups can work together.
Learn about ephemeral ports, ACLs in depth. Three tier ACL worked example7:33
You will see a detailed explanation of how ephemeral ports work in the context of ACLs and then we will go through several worked examples of ACL design for common situations. Lastly you will learn how ACLs for a complex three tier architecture can be broken down into simple steps that are easy to understand.
Best Practices for Implementing AWS network ACLs1:18
You will learn best practices for AWS network ACL design.

Avoiding Inbound/Outbound Confusion2:30
You will learn how to avoid common inbound/outbound confusion on exam questions.
General Method for Exam Questions on Security Groups and network ACLs2:38
You will learn a general method for analyzing most exam questions on security group and ACL traffic flows.
Sample Exam questions with explanations and analysis8:16
We will cover detailed analysis of three sample exam questions using the knowledge gained in this course.

Learn how to analyze AWS security groups and network ACLs and how to apply them in segregating and isolating cloud assets.

· In particular, we will cover AWS security groups and ACLs in depth.

· We will give a clear explanation of inbound/outbound traffic flows.

· You will learn how to apply Security Groups and ACLs to a three-tier architecture design that can be a template for your work on other projects.

· You will learn best practices for implementing security groups and ACLs.

· You will learn a proven technique for analyzing complex situations that may come up on certification exams.

· Four sample exam questions will be analyzed in detail where you will apply the methods we will learn in this course.

Beginner and intermediate students who need to gain a better understanding of analyzing and designing security groups and network ACLs in the AWS cloud environment.
Experienced network engineers who are new to the AWS environment.
Students who are studying for AWS Certification exams
Folks who are confused when analyzing inbound and outbound flows in complex exam scenarios.