Security Engineering on AWS

Efficiently use AWS security services, stay secure and compliant in the AWS Cloud!

This course demonstrates how to efficiently use AWS security services to stay secure in the AWS Cloud. The training focuses on the security practices that AWS recommends for enhancing the security of your data and systems in the cloud. It highlights the security features of AWS key services including compute, storage, networking, and database services. You will also learn how to leverage AWS services and tools for automation, continuous monitoring and logging, and responding to security incidents.

The Security Engineering on AWS training is recommended for earning the AWS Certified Security-Specialty certification.

Note: Lab time available only for class duration & not beyond. Additional lab charges apply for “repeat students”.

Course Objectives

• Use the AWS shared security responsibility model
• Architect and build AWS application infrastructures that are protected against the most common security threats
• Use encryption to protect data at rest and in transit
• Apply security checks and analyses in an automated and reproducible way
• Configure authentication for resources and applications in the AWS Cloud
• Gain insight into events by capturing, monitoring, processing, and analyzing logs
• Identify and mitigate incoming threats against applications and data
• Perform security assessments to ensure that common vulnerabilities are patched and security best practices are applied

Course Outline

• Course introduction
• Identifying entry points on AWS
• Security considerations: web application environments
• Application security
• Securing network communications - part 1
• Data security
• Security considerations: hybrid environments
• Monitoring and collecting logs on AWS
• Processing Logs on AWS
• Securing network communications - part 2
• Out-of-region protection
• Account management on AWS
• Security considerations: serverless environments
• Secrets Management on AWS
• Automating security on AWS
• Threat detection and sensitive data monitoring

Who Should Attend

• Security engineers
• Security architects
• Security operations
• Information security

Prerequisites

Recommended

• AWS Security Fundamentals
• Familiarity with cloud computing concepts
• Working knowledge of IT security practices and infrastructure concepts
• Architecting on AWS
• AWS Cloud Practitioner Essentials

What Exam Do I Need To Get Certified?

• SCS-C01 : AWS Certified Security - Specialty