Overview

AI, Data Science & Cloud Certificates from Google, IBM & Meta — 50% Off

One plan covers every Professional Certificate on Coursera. 50% off Coursera Plus Annual for 10 days only — price increases June 17.

Unlock All Certificates

This course equips learners with the essential tools and techniques for monitoring, logging, and securing AWS infrastructure to ensure robust cloud security. By exploring native AWS services, students will master the strategies required to safeguard AWS resources effectively. You will gain in-depth knowledge on monitoring and logging within AWS, utilizing services such as CloudWatch and CloudTrail. The course emphasizes the importance of infrastructure security, including how to protect EC2 instances and manage key infrastructure components. What sets this course apart is its combination of theory with real-world applications. Through detailed explanations and interactive assessments, learners will develop practical skills for managing cloud security operations, making the content immediately applicable to real-world AWS environments. This course is ideal for cloud security professionals, AWS architects, and those working in infrastructure security roles. A foundational understanding of AWS or cloud services is recommended. This course is part two of a three-course Specialization designed to provide a comprehensive learning pathway in this subject area. While it delivers standalone value and practical skills, learners seeking a more integrated and in-depth progression may benefit from completing the full Specialization.

Syllabus

Logs Generated by AWS Services

This module explores how to capture, access, and interpret logs generated by various AWS services, including S3, VPC, ELB, WAF, and CloudTrail. Learners will gain practical skills in configuring logging, retrieving log data, and leveraging logs for monitoring, troubleshooting, and security auditing within AWS environments.

CloudWatch and CloudWatch Metrics

This module guides learners through the setup and use of Amazon CloudWatch for monitoring AWS resources. You will learn how to configure IAM roles, install the CloudWatch agent on EC2 instances, search log files, and create real-time dashboards for visualizing metrics. By the end, you'll be able to effectively monitor and analyze AWS environments using CloudWatch tools.

Parsing Logs and Events with AWS Native Tools

This module explores strategies for efficiently storing and managing AWS log data using native tools like S3 Intelligent-Tiering and S3 Lifecycle policies. Learners will compare storage options and costs between Amazon S3 and CloudWatch Logs, gaining practical skills to optimize log retention and expenses.

Configuring Infrastructure Security

This module guides learners through the essentials of securing cloud infrastructure by configuring AWS Virtual Private Clouds (VPCs), subnets, and network access controls. You will explore how to manage network segmentation, route traffic securely, and connect on-premises environments to the cloud. By the end, you'll understand how to implement and assess key security measures for robust cloud networking.

Securing EC2 Instances

This module explores essential strategies for securing AWS EC2 instances, including key management, secure access methods, and automated configuration using Systems Manager. Learners will gain practical skills in isolating instances for forensic analysis and maintaining security through patch management. By the end, you'll be equipped to implement and manage robust security measures for EC2 environments.

Managing Key Infrastructure

This module introduces the fundamentals of managing cryptographic key infrastructure in cloud environments, focusing on AWS Key Management Service (KMS) and CloudHSM. Learners will explore key creation, access control, compliance checks, and practical use cases for hardware security modules. By the end, you'll understand how to securely manage and govern encryption keys to protect sensitive data.