AWS: Security and Key Management

Overview

AWS: Security and Key Management Course is the third course of Exam Prep (SAP-C02): AWS Certified Solutions Architect - Professional Specialization. This course provides a comprehensive understanding of AWS IAM for managing users, groups, policies, and MFA, alongside AWS IAM Identity Center, AWS Certificate Manager for SSL/TLS certificates, AWS Key Management Service for encryption, including Amazon S3 encryption options, and AWS Resource Access Manager for centralized access control. The course covers network security with AWS WAF and Shield, threat detection using Amazon GuardDuty and Amazon Macie, and vulnerability management with Amazon Inspector. This course facilitates learners with approximately 3:00-3:30 Hours of Video lectures that provide both Theory and Hands-On knowledge. Also, Graded and Ungraded Quizzes are provided with every module to test learners' ability. - Module 1: Security in AWS - Module 2: Key Management in AWS This course is designed for professionals seeking to demonstrate a comprehensive understanding of core AWS security services, including Identity and Access Management, threat detection, data protection, and vulnerability management, crucial for building and deploying secure applications and protecting sensitive data on the AWS platform. - Senior Solutions Architects - Enterprise Architects - Cloud Infrastructure Architects - Senior DevOps Engineers By the end of the course, learners will be able to: - Manage users, groups, and roles using AWS IAM and IAM Identity Center. - Configure AWS WAF and AWS Shield to protect applications from common web exploits and DDoS attacks. - Manage encryption keys and secure data using AWS Key Management Service (KMS) and S3 encryption methods, respectively.

Syllabus

Security in AWS

Welcome to Week 1 of the AWS: Security and Key Management course. This week, we'll explore AWS security services, beginning with IAM fundamentals — users, groups, policies, MFA, and the IAM Identity Center. We'll then cover IAM Access Analyzer and Resource Access Manager for effective permission management. In network security, we'll dive into AWS WAF and AWS Shield for protection against web threats. You'll gain hands-on experience with Amazon GuardDuty for threat detection and Amazon Macie for sensitive data protection, including real-world demos of setting up Macie jobs and analyzing findings. By week's end, you'll be equipped with practical knowledge of essential AWS security tools and best practices.

Key Management in AWS

Welcome to Week 2 of the AWS: Security and Key Management course. This week, we'll explore key AWS security services, starting with AWS Certificate Manager (ACM) for managing SSL/TLS certificates and Amazon Inspector for automating security assessments on EC2 instances. You'll learn how to configure and set up Amazon Inspector to find vulnerabilities effectively. We'll then dive into AWS Key Management Service (KMS), covering its core features and encryption management. Finally, we'll examine Amazon S3 encryption options and understand how encryption works in securing your storage. By the end of this week, you’ll gain essential skills to enhance the security and compliance of your AWS environments.