AWS Security Essentials (UT-AWS-SE)

Course Description

This course covers fundamental AWS cloud security concepts, including AWS access control, data encryption methods, and how network access to your AWS infrastructure can be secured. Based on the AWS Shared Security Model, you learn where you are responsible for implementing security in the AWS Cloud and what security-oriented services are available to you and why and how the security services can help meet the security needs of your organization.

Course Objectives

1. Assimilate Identify security benefits and responsibilities of using the AWS Cloud
2. Describe the access control and management features of AWS
3. Explain the available methods for providing encryption of data in transit and data at rest when storing your data in AWS.
4. Describe how to secure network access to your AWS resources
5. Determine which AWS services can be used for monitoring and incident response

Course Outline

1 - Security on AWS

• Security design principles in the AWS Cloud
• AWS Shared Responsibility Model

2 - Security OF the Cloud

• AWS Global Infrastructure
• Data center security
• Compliance and governance

3 - Security IN the Cloud – Part 1

• Identity and access management
• Data protection essentials
• Lab 01 – Introduction to security policies

4 - Security IN the Cloud – Part 2

• Securing your infrastructure
• Monitoring and detective controls
• Lab 02 – Securing VPC resources with Security Groups

5 - Security IN the Cloud – Part 3

• DDoS mitigation
• Incident response essentials
• Lab 03 – Remediating issues with AWS Config Conformance Packs

6 - Course Wrap Up

• AWS Well-Architected tool overview
• Next Steps

Course Prerequisites

• Working knowledge of IT security practices and infrastructure concepts, familiarity with cloud computing concepts

Course Information

Length: 1 day

Format: Lecture and Lab

Delivery Method: n/a

Max. Capacity: 16

Who Should Attend

• Security IT business-level professionals interested in cloud security practices
• Security professionals with minimal to no working knowledge of AWS