AWS Security Incident Response - User Training

This comprehensive training equips you with the essential skills to navigate the AWS Security Incident Response service. You will learn how to:

• Set up a central membership account.
• Configure proactive response workflows.
• Manage an incident response team.
• Create and resolve security incident cases.
• Use powerful containment strategies.

By the end of the course, you will be able to use AWS Security Incident Response to reduce the time and cost associated with security incidents.

• Course level: Fundamental
• Duration: 60-120 minutes

Activities

• Presentations
• Demonstrations
• Videos
• Assessments

Course objectives

• Understand the key features and benefits of AWS Security Incident Response
• Navigate the AWS Security Incident Response dashboard
• Manage an incident response team
• Use AWS Organizations to set up account associations
• Configure monitoring and investigation settings
• Create and manage cases
• Use containment strategies and tools

Intended audience

• AWS customers or AWS Partners who have recently enrolled or are interested in enrolling in the AWS Security Incident Response service

Recommended Skills

• None

Course outline

Module 1: Introduction

Module 2: Getting Started

• AWS Security Incident Response Console
• Step 1: Set Up Central Membership Account
• Step 2: Define Membership Details
• Step 3: Permissions for Proactive Response
• Step 4: Review Service Permissions
• Step 5: Review and Sign Up
• Knowledge Check

Module 3: Dashboard

• Using the Dashboard

Module 4: Cases

• Create a Case
• Responding to an AWS Generated Case
• Locating an Existing Case
• Changing the Case Status
• Changing the Resolver
• Action Items
• Edit a Case
• Communications
• Permissions
• Attachments
• Tags
• Case Activities
• Closing a Case
• Knowledge Check

Module 5: Conclusion

• Summary and Resources