Amazon Web Services (AWS) - Security Engineering on AWS

Dauer

Dauer:

Nur 2 Tage

Methode

Methode:

Klassenraum / Online / Hybrid

nächster Termin

nächster Termin:

10.2.2025 (Montag)

Overview

This accelerated Security Engineering on AWS intermediate-level course is led by an expert AWS instructor who will guide you through the security practices that AWS recommends for enhancing the security of data and systems in the cloud.

You will learn to efficiently use AWS security services including Amazon Security Lake, Amazon Detective, AWS Control Tower, AWS Secrets Manager, Amazon CloudWatch, Amazon GuardDuty, and more for automation, continuous monitoring and logging, and responding to security incidents.

Security is a concern for both customers in the cloud, and those considering cloud adoption. An increase in cyberattacks and data leaks remains top of mind for most industry personnel. This Security Engineering on AWS course addresses these concerns by helping you better understand how to interact and build with Amazon Web Services (AWS) in a secure way. In this course, you will learn about managing identities and roles, managing and provisioning accounts, and monitoring API activity for anomalies. You will also learn about how to protect data stored on AWS. The course explores how you can generate, collect, and monitor logs to help identify security incidents. Finally, you will review detecting and investigating security incidents with AWS services.

In just 2 days, you’ll learn to state an understanding of AWS cloud security based on the CIA triad. You’ll also learn how to:

  • Create and analyse authentication and authorizations with IAM
  • Manage and provision accounts on AWS with appropriate AWS services
  • Identify how to manage secrets using AWS services
  • Monitor sensitive information and protect data via encryption and access controls
  • Identify AWS services that address attacks from external sources
  • Monitor, generate, and collect logs
  • Identify indicators of security incidents
  • Identify how to investigate threats and mitigate using AWS services

At the end of this course, you’ll achieve your Security Engineering on AWS certification.

Through Firebrand’s Lecture | Lab | Review methodology, you’ll get certified at twice the speed of the traditional training and get access to courseware, learn from certified instructors, and train in a distraction-free environment.

Audience

This course is ideal for:

  • Security engineers
  • Security architects
  • Cloud Architects
  • Cloud operators

Benefits

In einem Firebrand Intensiv-Training profitieren Sie von folgenden Vorteilen:

  • Zwei Optionen - Präsenz- oder Onlinetraining
  • Ablenkungsfreie Lernumgebung
  • Eigene Trainings- und Prüfungszentren (Pearson VUE Select Partner)
  • Effektives Training mit praktischen Übungseinheiten und intensiver Betreuung durch unsere Trainer
  • Umfassendes Leistungspaket mit allem, was Sie benötigen, um Ihre Zertifizierung zu erhalten, inklusive unserer Firebrand Leistungsgarantie.

Curriculum

Module 1: Security Overview and Review

  • Explain Security in the AWS Cloud.
  • Explain AWS Shared Responsibility Model.
  • Summarize IAM, Data Protection, and Threat Detection and Response.
  • State the different ways to interact with AWS using the console, CLI, and SDKs.
  • Describe how to use MFA for extra protection.
  • State how to protect the root user account and access keys.

Module 2: Securing Entry Points on AWS

  • Describe how to use multi-factor authentication (MFA) for extra protection.
  • Describe how to protect the root user account and access keys.
  • Describe IAM policies, roles, policy components, and permission boundaries.
  • Explain how API requests can be logged and viewed using AWS CloudTrail and how to view and analyse access history.
  • Hands-On Lab: Using Identity and Resource Based Policies.

Module 3: Account Management and Provisioning on AWS

  • Explain how to manage multiple AWS accounts using AWS Organizations and AWS Control Tower
  • Explain how to implement multi-account environments with AWS Control Tower
  • Demonstrate the ability to use identity providers and brokers to acquire access to AWS services
  • Explain the use of AWS IAM Identity Centre (successor to AWS Single Sign-On) and AWS Directory Service
  • Demonstrate the ability to manage domain user access with Directory Service and IAM Identity Centre
  • Hands-On Lab: Managing Domain User Access with AWS Directory Service

Module 4: Secrets Management on AWS

  • Describe and list the features of AWS KMS, CloudHSM, AWS Certificate Manager (ACM), and AWS Secrets Manager.
  • Demonstrate how to create a multi-Region AWS KMS key.
  • Demonstrate how to encrypt a Secrets Manager secret with an AWS KMS key.
  • Demonstrate how to use an encrypted secret to connect to an Amazon Relational Database Service (Amazon RDS) database in multiple AWS Regions
  • Hands-on lab: Lab 3: Using AWS KMS to Encrypt Secrets in Secrets Manager

Module 5: Data Security

  • Monitor data for sensitive information with Amazon Macie.
  • Describe how to protect data at rest through encryption and access controls.
  • Identify AWS services used to replicate data for protection.
  • Determine how to protect data after it has been archived.
  • Hands-on lab: Lab 4: Data Security in Amazon S3

Module 6: Infrastructure Edge Protection

  • Describe the AWS features used to build secure infrastructure.
  • Describe the AWS services used to create resiliency during an attack.
  • Identify the AWS services used to protect workloads from external threats.
  • Compare the features of AWS Shield and AWS Shield Advanced.
  • Explain how centralized deployment for AWS Firewall Manager can enhance security.
  • Hands-on lab: Lab 5: Using AWS WAF to Mitigate Malicious Traffic

Module 7: Monitoring and Collecting Logs on AWS

  • Identify the value of generating and collecting logs.
  • Use Amazon Virtual Private Cloud (Amazon VPC) Flow Logs to monitor for security events.
  • Explain how to monitor for baseline deviations.
  • Describe Amazon EventBridge events.
  • Describe Amazon CloudWatch metrics and alarms.
  • List log analysis options and available techniques.
  • Identify use cases for using virtual private cloud (VPC) Traffic Mirroring.
  • Hands-on lab: Lab 6: Monitoring for and Responding to Security Incidents

Module 8: Responding to Threats

  • Classify incident types in incident response
  • Understand incident response workflows
  • Discover sources of information for incident response using AWS services
  • Understand how to prepare for incidents
  • Detect threats using AWS services
  • Analyse and respond to security findings
  • Hands-on lab: Lab 7: Incident Response

Exam Track

At the end of this accelerated course, you’ll achieve your Security Engineering on AWS Certification.

  • This course includes presentations, hands-on labs, demonstrations, and group exercises.

What's Included

Prerequisites

Before attending this accelerated course, you should have:

  • Completed the following courses:
  • AWS Security Essentials or AWS Security Fundamentals and Architecting on AWS
  • Working knowledge of IT security practices and infrastructure concepts Familiarity with the AWS Cloud

Sind Sie sich unsicher, ob Sie die Voraussetzungen erfüllen? Wir besprechen gerne mit Ihnen Ihren technischen Hintergrund, Erfahrung und Qualifikation, um herauszufinden, ob dieser Intensivkurs der richtige für Sie ist.

Erfahrungsberichte

Bereits 134561 Kursteilnehmer haben seit 2001 erfolgreich einen Firebrand-Kurs absolviert. Unsere aktuellen Kundenbefragungen ergeben: Bei 95.43% unserer Teilnehmer wurde die Erwartungshaltung durch Firebrand übertroffen!


"Firebrand schafft eine optimale Umgebung, um schnell, viel zu lernen!"
M.P.. (4.12.2023 (Montag) bis 10.12.2023 (Sonntag))

"The Instructor hat a deep knowledge, patient and made the training fun."
E.A.. (4.12.2023 (Montag) bis 10.12.2023 (Sonntag))

"Think twice, dont do it."
Anonym (18.11.2019 (Montag) bis 24.11.2019 (Sonntag))

"If you have the brain, but not the time, Firebrand is the best for you."
Anonym (26.8.2019 (Montag) bis 29.8.2019 (Donnerstag))

"Excellent quality instruction; super intensive pace that will take you back 20 years to University exam cramming. "
Anonym (20.5.2019 (Montag) bis 23.5.2019 (Donnerstag))

Kurstermine

Start

Ende

Verfügbarkeit

Standort

Anmelden

26.8.2024 (Montag)

27.8.2024 (Dienstag)

Kurs gelaufen - Hinterlasse Kommentar

-

 

 

10.2.2025 (Montag)

11.2.2025 (Dienstag)

Einige Plätze frei

Überregional

 

24.3.2025 (Montag)

25.3.2025 (Dienstag)

Einige Plätze frei

Überregional

 

5.5.2025 (Montag)

6.5.2025 (Dienstag)

Einige Plätze frei

Überregional

 

16.6.2025 (Montag)

17.6.2025 (Dienstag)

Einige Plätze frei

Überregional

 

Neueste Rezensionen von unseren Kursteilnehmern