Cloud Security with AWS and Microsoft Azure

Provision, manage, deploy public, private, DNS SSL certificates with certificate manager on amazon cloud, automating renewals and integrating with load balancers and API gateway to secure identities.

Learn to create an Amazon cloud hsm instance, configure a cluster with a VPC in a chosen region, add nodes, enable backups, and delete unused clusters.

Explore how AWS Directory Service enables managed Microsoft Active Directory integration, single sign-on, group policy, and seamless domain joins for cloud workloads and hybrid environments.

GuardDuty uses machine learning to detect anomalies and potential account compromise by analyzing AWS events across accounts with CloudWatch events, enabling automated responses with Lambda.

learn to set up an AWS GuardDuty instance, a security tool under the security, identity and compliance category, that detects activity and analyzes DNS queries to surface findings.

Explore Amazon Inspector, an automated security and compliance assessment tool for cloud applications, generating prioritized findings and integrating with config rules and trusted advisor to harden environments.

Practical use of Amazon Inspector to analyze security issues, run assessments, check GuardDuty findings, apply hardening benchmarks, and generate template rule sets with defined execution duration.

Learn how Secrets Manager protects sensitive information such as credentials, database passwords, and API keys in the cloud using cryptographic protection, rotation, and centralized access controls.

Implement a practical single sign-on cloud service to manage access for users and groups through Microsoft Active Directory, integrate with AWS and Azure, and automate SSL provisioning.

Configure AWS web application firewall and shield to protect websites and apps from web exploits and DDoS attacks using access control lists and IP match conditions to block malicious traffic.

Explore the AWS VPC dashboard to manage subnets, routing tables, internet gateways, and elastic IPs across regions. Learn inbound and outbound rules and core security considerations for cloud networking.

Create subnets within your cloud environment by naming the subnet, selecting a region and IP version, and configuring a routing table and an internet gateway.

Create and attach an internet gateway to your AWS VPC to enable internet access. Manage the gateway via the console, CLI, or PowerShell and detach it if needed.

Customize route tables and network components in AWS VPC, including creating a VPC and subnets, configuring internet and NAT gateways, and managing DHCP options and elastic IPs.

Azure Active Directory provides a fully managed identity and access platform that extends on-premises directories to the cloud, enabling single sign-on, conditional access, and threat protection for apps and partners.

Guard cloud resources from distributed denial of service with always-on monitoring, automatic mitigation, adaptive tuning, and web application firewall integration for real-time DDoS protection.

Learn to create and manage cryptographic keys in a key vault on AWS, configure access policies and firewall rules, and monitor keys and certificates.

Explore dedicated hardware security modules in the cloud, providing isolated, customer-controlled cryptographic key storage with tamper-resistant hardware, migration support, and certifications like Common Criteria to ensure security and compliance.

activate application gateway as an application-layer load balancer that routes web traffic by HTTP attributes, enabling scalable, secure front-end delivery with integration to security center and log analytics.

Learn to deploy and configure an application gateway, monitor its resources and status, manage back-end pools, listeners, and front-end settings, and apply ssl policies and a web application firewall.