Complete Guide to AWS Security and Compliance Management

Introduction

• AWS security overview
• What you should know

1. AWS Security Foundations

• Understanding shared responsibility
• Understanding the AWS security landscape
• Understanding separation of duties
• Implementing separation of duties
• Understanding CloudTrail
• Enabling CloudTrail
• Understanding CloudWatch
• Understanding CloudWatch alarms
• Configuring Simple Notification Service
• Using a CloudWatch alarm
• Installing the command line interface (CLI) for Mac
• The command line interface (CLI) for Windows

2. IAM Concepts in AWS

• Understanding Identity and Access Management
• Understanding IAM policies
• Configure IAM policies
• Understanding IAM groups
• Configure IAM groups
• Configuring a password policy
• Configure IAM users: Web console
• Configure IAM users: CLI
• IAM challenge
• IAM challenge solution
• Configuring IAM roles
• Configuring IAM roles
• Validating an IAM role
• Extending CloudWatch
• Install CloudWatch agent
• Challenge: IAM roles
• Solution: IAM roles
• Understanding Security Token Service
• Creating a temporary access role
• Creating a temporary access policy
• Validating temporary access
• Challenge: Super admin
• Solution: Super admin
• Illustrating access restrictions
• Exploring IAM policy simulator
• Understanding Cognito
• Creating a Cognito user pool
• Creating a Cognito identity pool
• Understanding Verified Permissions
• Understanding federated access
• Enabling federated access
• Validating federated access
• Securing financial access
• Enabling financial access

3. Multi-Account Access

• Understanding Organizations
• Understanding Control Tower
• Understanding IAM Identity Center
• Exploring IAM Identity Center
• Validating IAM Identity Center
• Understanding Resource Access Manager
• Exploring Resource Access Manager

4. Detection and Response

• Understanding AWS Config
• Enabling AWS Config
• Exploring AWS Config results
• Exploring conformance packs
• Understanding AWS GuardDuty
• Exploring AWS GuardDuty
• Understand IAM Access Analyzer
• Exploring IAM Access Analyzer results
• Understanding Amazon Detective
• Exploring Amazon Detective
• Understanding Amazon Inspector
• Exploring Amazon Inspector
• Resolving an Inspector finding
• Understanding Amazon Security Lake
• Understanding IoT Device Defender
• Understanding AWS Elastic Disaster Recovery
• Configuring Elastic Disaster Recovery
• Configuring a source server
• Exploring AWS Elastic Disaster Recovery
• Removing a source server

5. Network and Application Protection

• Understand Web Application Firewall
• Exploring Web Application Firewall
• Configuring Web Application Firewall
• Validating Web Application Firewall
• Understand AWS Shield
• Understanding AWS Firewall Manager
• Understanding AWS Network Firewall
• Understand AWS Verified Access
• Understanding DNS Firewall
• Configuring DNS Firewall

6. Data Protection and Operations

• Understanding Amazon Macie
• Configuring a Macie job
• Exploring Macie results
• Understanding Key Management Service
• Creating a KMS key
• Creating a multi-region KMS key
• Using a KMS in S3
• Using KMS and an IAM role
• Automating KMS key rotation
• Deleting a KMS key
• Enabling EBS default encryption
• Understanding Secrets Manager
• Using Secrets Manager
• Enabling autorotation with Secrets Manager
• Creating a multi-region secret
• Deleting a Secrets Manager secret
• Understanding AWS CloudHSM
• Understanding Systems Manager
• Implementing Systems Manager
• Resolving compliance with Systems Manager
• Creating Resource Groups
• Patching with Systems Manager
• Understanding Incident Manager
• Using Parameter Store
• Understand Certificate Manager
• Creating a private certificate authority
• Creating a private certificate
• Using a private certificate
• Understanding Payment Cryptography
• Challenge: KMS
• Solution: KMS

7. S3 Access Management

• Exploring S3 management options
• Accessing S3 privately
• Configuring private S3 access
• Managing S3 with IAM
• Restricting S3 access with IAM
• Validating custom IAM S3 policy
• Leveraging S3 IAM policies in EC2
• Creating an S3 bucket policy
• Illustrating S3 bucket policies with CLI
• Understanding S3 access control lists
• Understanding public access in S3
• S3 public access best practices
• Exploring pre-signed URLs
• Understanding S3 Access Grants
• Understanding S3 Access Points
• Exploring S3 Access Points
• Understanding data protection schemes
• S3 security and compliance best practices
• Challenge: S3 replication challenge
• Solution: S3 replication challenge
• Challenge: S3 lifecycle challenge
• Solution: S3 lifecycle challenge

8. Security Audits in AWS

• Understanding AWS Security Hub
• Using AWS Security Hub
• Rotating access keys
• Understand AWS Artifact
• Understanding Trusted Advisor
• Exploring Trusted Advisor
• Understanding Audit Manager
• Exploring Audit Manager
• Prepare for a security audit

Conclusion

• Next steps