I. Overview:

This course covers fundamental AWS cloud security concepts, including AWS access control, data encryption methods, and how network access to your AWS infrastructure can be secured. Based on the AWS Shared Security Model, you learn where you are responsible for implementing security in the AWS Cloud and what security-oriented services are available to you and why and how the security services can help meet the security needs of your organization.

II. Duration: 24 hours (3 days)

III. Objectives:

• Assimilate Identify security benefits and responsibilities of using the AWS Cloud
• Describe the access control and management features of AWS
• Explain the available methods for providing encryption of data in transit and data at rest when storing your data in AWS
• Describe how to secure network access to your AWS resources
• Determine which AWS services can be used for monitoring and incident response

IV. Intended Audience:

• Security IT business-level professionals interested in cloud security practices
• Security professionals with minimal to no working knowledge of AWS

V. Prerequisites:

Working knowledge of IT security practices and infrastructure concepts, familiarity with cloud computing concepts.

VI. Course outlines:

1. Module 1: Exploring the Security Pillar

• Overview
• Security in the AWS Cloud
• Security Design Principles
• Knowledge Check

2. Module 2: Security of the Cloud

• Overview
• AWS Shared Responsibility Model
• AWS Global Infrastructure
• Data Center Security
• Compliance and Governance
• Knowledge Check

3. Module 3: Identity and Access Management (IAM)

• Overview
• Identity and Access Management
• Permissions and Accounts
• Data Protection Essentials
• Knowledge Check
• Lab 1: Introduction to Security Policies

4. Module 4: Protecting Infrastructure and Data

• Overview
• Protecting your Network Infrastructure
• Edge Security
• DDoS Mitigation
• Protecting Compute Resources
• Knowledge Check
• Lab 2: Securing VPC Resources with Security Groups

5. Module 5: Detection and Incident Response

• Overview
• Monitoring and Detective Controls
• Incident Response Essentials
• Knowledge Check