Security Engineering on AWS

Course Description:

  The Security Engineering on AWS course is a 3-day hands-on course that teaches students how to efficiently use AWS security services for optimal security and compliancy in the AWS cloud.

In this course, students will focuse on the AWS-recommended best practices that they can implement to enhance the security of their data and systems in the cloud. The course covers the security features of AWS key services including compute, storage, networking, and database services. The course will also discuss the common security control objectives and regulatory compliance standards. Additionally, students will examine use cases for running regulated workloads on AWS across different verticals, globally. Students will also learn how to leverage AWS services and tools for automation and continuous monitoring-taking your security operations to the next level.

Topics covered in the course include:

• Assimilating and leveraging the AWS shared security responsibility model
• Manging user identity and access management in the AWS cloud
• Using AWS security services such as AWS Identity and Access Management, Amazon Virtual Private Cloud, AWS CloudTrail, Amazon CloudWatch, AWS Key Management Service, AWS CloudHSM, AWS Config, AWS Service Catalog, and AWS Trusted Advisor
• Implementing better security controls for resources in the AWS cloud
• Managing and auditing AWS resources from a security perspective
• Monitoring and loggin access and usage of AWS compute, storage, networking, and database services
• Assimilating and leveraging the AWS shared compliance responsibility model
• Identifying AWS services and tools to help automate, monitor, and manage security operations on AWS
• Performing security incident management, cloud resiliency, and business continuity in the AWS cloud

Target Student: This course is ideal for Security engineers, architects, analysts, and auditors.

Prerequisites: Students should possess the following experience before attending the course:

• Have attended the AWS Security Fundamentals course
• Experience with governance, risk, compliance regulations, and control objectives
• Working knowledge of IT security practices
• Working knowledge of IT infrastructure concepts
• Familiarity with cloud computing concepts

Course Outline

• Introduction to Cloud Security
• Security of the AWS Cloud
• Cloud Aware Governance and Compliance
• Identity and Access Management
• Securing AWS Infrastructure Services
• Securing AWS Container Services
• Securing AWS Abstracted Services
• Using AWS Security Services
• Data Protection in the AWS Cloud
• Building Compliant Workloads on AWS-Case Study
• Security Incident Management in the Cloud

Note: This is an emerging technology course. The course outline is subject to change as needed.

This course allows students to test their new skills and apply knowledge to their working environment through a variety of practical exercises.