AWS Administration: Security Operations

Get an in-depth look at the most essential AWS security services. Learn what AWS has to offer in the areas of infrastructure security, data protection, and detective controls.

Introduction

• Understanding AWS security operations
• What you should know

1. Infrastructure Security

• AWS Shield: Standard
• AWS Shield: Advanced
• AWS Web Application Firewall (WAF)
• Demo: AWS WAF
• Automate compliance with Amazon Inspector
• Explore Amazon Virtual Private Cloud
• VPC Security groups
• Network ACLs
• Optimize your environment with Trusted Advisor
• Explore VPC endpoints
• Demo: VPC Endpoints

2. Data Protection

• Data protection in transit and at rest
• Data encryption options for storage services
• S3 Encryption
• Key Management Service
• Explore Cloud HSM
• Analyze breaches with Amazon Macie
• Certificate Manager
• Demo: Amazon Macie

3. Detective Controls

• Understanding visibility and logging
• Monitor security with CloudTrail
• Demo: CloudTrail
• Challenge: Create a Custom Trail
• Solution: Create a Custom Trail
• CloudWatch
• CloudWatch Logs
• CloudWatch Events
• VPC Flow Logs
• Monitor activity with GuardDuty
• Manage security with ControlTower
• Lambda and Lambda functions
• Simple Notification Services
• Explore AWS Config
• Demo: Config

Conclusion

• Beyond AWS security operations