Security Engineering on AWS
  1. Home
  2. Courses
  3. Amazon Web Services (AWS)
  4. Security Engineering on AWS

Security Engineering on AWS

Have a query?

+91 9650575554

Security is a concern for both customers in the cloud, and those considering cloud adoption. An increase in cyberattacks and data leaks remains top of mind for most industry personnel. The Security Engineering on AWS course addresses these concerns by helping you better understand how to interact and build with Amazon Web Services (AWS) in a secure way.

Let's Lalk

Overview

Learn how to secure systems, data, and apps on AWS with the Security Engineering on AWS course. Identity and access management (IAM), network security, encryption, incident response, and compliance are among the important subjects it addresses. You will get familiar with AWS security services such as IAM, KMS, and Amazon VPC through practical labs. You will also learn how to create safe architectures and handle security incidents. To improve their cloud security expertise on AWS, security professionals should take this course.

Key Features

  • Identity and Access Management (IAM)
  • Data Encryption
  • Network Security
  • Incident Response

Curriculum

Study Plan

1Module 1: Security Overview and Review
  • Explain Security in the AWS Cloud.
  • Explain AWS Shared Responsibility Model.
  • Summarize IAM, Data Protection, and Threat Detection and Response. 
  • State the different ways to interact with AWS using the console, CLI, and SDKs.
  • Describe how to use MFA for extra protection.
  • State how to protect the root user account and access keys.
2Module 2: Securing Entry Points on AWS
  • Describe how to use multi-factor authentication (MFA) for extra protection.
  • Describe how to protect the root user account and access keys.
  • Describe IAM policies, roles, policy components, and permission boundaries.
  • Explain how API requests can be logged and viewed using AWS CloudTrail and how to view and analyze access history. 
3Module 3: Account Management and Provisioning on AWS
  • Explain how to manage multiple AWS accounts using AWS Organizations and AWS Control Tower.
  • Explain how to implement multi-account environments with AWS Control Tower.
  • Demonstrate the ability to use identity providers and brokers to acquire access to AWS services.
  • Explain the use of AWS IAM Identity Center (successor to AWS Single Sign-On) and AWS Directory Service.
  • Demonstrate the ability to manage domain user access with Directory Service and IAM Identity Center
4Module 4: Secrets Management on AWS
  • Describe and list the features of AWS KMS, CloudHSM, AWS Certificate Manager (ACM), and AWS Secrets Manager.
  • Demonstrate how to create a multi-Region AWS KMS key.
  • Demonstrate how to encrypt a Secrets Manager secret with an AWS KMS key.
  • Demonstrate how to use an encrypted secret to connect to an Amazon Relational Database Service (Amazon RDS) database in multiple AWS Regions 
5Module 5: Data Security
  • Monitor data for sensitive information with Amazon Macie.
  • Describe how to protect data at rest through encryption and access controls. 
  • Identify AWS services used to replicate data for protection.
  • Determine how to protect data after it has been archived. 
6Module 6: Infrastructure Edge Protection
  • Describe the AWS features used to build secure infrastructure.
  • Describe the AWS services used to create resiliency during an attack.
  • Identify the AWS services used to protect workloads from external threats.
  • Compare the features of AWS Shield and AWS Shield Advanced.
  • Explain how centralized deployment for AWS Firewall Manager can enhance security
7Module 7: Monitoring and Collecting Logs on AWS
  • Identify the value of generating and collecting logs.
  • Use Amazon Virtual Private Cloud (Amazon VPC) Flow Logs to monitor for security events.
  • Explain how to monitor for baseline deviations.
  • Describe Amazon Event Bridge events.
  • Describe Amazon CloudWatch metrics and alarms.
  • List log analysis options and available techniques.
  • Identify use cases for using virtual private cloud (VPC) Traffic Mirroring. 
8Module 8: Responding to Threats
  • Classify incident types in incident response.
  • Understand incident response workflows.
  • Discover sources of information for incident response using AWS services.
  • Understand how to prepare for incidents.
  • Detect threats using AWS services. 
  • Analyze and respond to security findings.

About Instructor

  • 3000+ Learner Trained
  • 42+ Corporate Recruiting Partners & 20+ College Partners
  • 1000+ Review
  • 200+ Classes/Month
  • aws solution architect certified
  • 3000+ Learner Trained
  • 42+ Corporate Recruiting Partners & 20+ College Partners
  • 1000+ Review
  • 200+ Classes/Month
  • aws solution architect certified
Still have question

Still have question?

Top instructors from around the world teach millions of students on CloudFreeks.

Let's talk Whatsapp
Become An Instructor Today

Become An Instructor Today

Top instructors from around the world teach millions of students on CloudFreeks.

Start Today