AWS Security: DevSecOps & AWS Security Services & Terraform

Course Curriculum

Chapter 1: Introduction

Lecture 1: Introduction and Course Agenda

Lecture 2: About the Course

Chapter 2: Deep Dive into DevSecOps

Lecture 1: Basic Security Terms – If new to security field

Lecture 2: What is DevSecOps?

Lecture 3: Tools used for DevSecOps Implementation in the market – Detailed discussion

Lecture 4: Tools used for DevSecOps in AWS

Chapter 3: Hands On – Integrating Security in AWS CI/CD Pipeline

Lecture 1: Create AWS Free Tier Account

Lecture 2: Install Git on Windows Machine

Lecture 3: Connect Git bash with AWS CodeCommit

Lecture 4: Push Vulnerable application code to AWS CodeCommit using Git Bash

Lecture 5: What is SonarCloud and its benefits?

Lecture 6: Add BuildSpec YAML file in the vulnerable application to integrate SonarCloud

Lecture 7: Create SonarCloud Project and update BuildSpec YAML file with SonarCloud values

Lecture 8: Create AWS Code Build project and run SAST analysis using SonarCloud

Lecture 9: Fix Code Coverage issues in SonarCloud for your Vulnerable application

Lecture 10: Move SonarCloud Security Token from Pipeline to AWS Secrets Manager

Lecture 11: Implement quality gates using Sonar

Lecture 12: Create AWS CodePipeline and automate the AWS CodeBuild project

Lecture 13: What is Snyk and its benefits?

Lecture 14: Snyk report issue with AWS Code Pipeline

Lecture 15: Integrate Snyk in AWS Code Pipeline

Lecture 16: What is OWASP ZAP and its benefits?

Lecture 17: Configure AWS Code Build to store security tools artifacts in S3 Buckets

Lecture 18: Integrate OWASP ZAP in AWS DevSecOps Pipeline using BuildSpec YAML

Chapter 4: Case Study: Implementing an End To End AWS DevSecOps Pipeline for a Java Project

Lecture 1: Case Study: Understanding Project Requirements before workflow implementation

Lecture 2: Hands On: Write code changes to integrate SAST, SCA & DAST in DevSecOps Pipeline

Lecture 3: Hands On: Execute End to End AWS DevSecOps Pipeline and review logs

Chapter 5: Assignment: Implement an End to End AWS DevSecOps pipeline for Gradle Project

Chapter 6: Report Security issues found during SAST, SCA & DAST scans in JIRA

Lecture 1: Hands On: Create JIRA account with Atlassian with custom JIRA site

Lecture 2: Hands On: Report SAST security issues in JIRA identified by SonarCloud

Lecture 3: Hands On: Report SCA security issues in JIRA identified by Snyk

Lecture 4: Hands On: Report DAST security issues in JIRA identified by OWASP ZAP

Lecture 5: Hands On: Integrate JIRA with SonarCloud to create tickets with one-click

Chapter 7: Security Services in AWS

Lecture 1: AWS Security Hub Basics

Lecture 2: Hands On: AWS Security Hub implementation

Lecture 3: Hands on: Amazon Inspector basics and implementation – Part 1

Lecture 4: Hands on: Amazon Inspector – Create Assessment using Classic Inspector – Part 2

Lecture 5: Hands on: Amazon Detective basics and implementation

Lecture 6: Guard duty basics and implementation

Lecture 7: Hands on: Review Guard duty findings and additional features

Lecture 8: Hands on: Amazon IAM access analyzer basics and implementation

Lecture 9: Hands on: Amazon Macie basics and implementation – Part 1

Lecture 10: Hands on: Amazon Macie basics and implementation – Part 2

Lecture 11: AWS Audit Manager Basics and Implementation

Lecture 12: Create assessment in AWS audit manager

Lecture 13: Hands On: Review results of all integrations performed with Security Hub

Lecture 14: Hands On: Implement WAF in AWS

Lecture 15: Hands On: Create Regular Expression Pattern Set in AWS WAF and assign it to ACL

Chapter 8: Learn to Create AWS Infra using Terraform for DevSecOps Interview and run IAC

Lecture 1: Download Terraform on Windows Machine and Configure PATH in windows machine

Lecture 2: Create AWS Admin User

Lecture 3: Install AWS CLI and Authenticate with AWS

Lecture 4: Install Visual Studio Code on Windows Machine

Lecture 5: Clone Terraform Repo On Local System

Lecture 6: Open the Terraform Repo in Visual Studio Code

Lecture 7: Understand Terraform Script to create AWS Infrastructure

Lecture 8: Understand shell script to install softwares on EC2 instance using Terraform

Lecture 9: Understand variables file in TF and create AWS Key pair to create EC2 using TF

Lecture 10: VPC Id for the infra creation

Lecture 11: Run Terraform Script to create AWS Infrastructure

Lecture 12: Create Kubernetes Cluster (EKS) using EKSCTL utility

Lecture 13: Cleanup resources created in the course using eksctl and Terraform

Lecture 14: Run IAC security scan with Bridgecrew

Chapter 9: Cloud Security and Posture Management with Qualys TotalCloud

Lecture 1: What is CSPM?

Lecture 2: Create an account with Qualys TotalCloud for running CSPM on AWS

Lecture 3: Scan AWS Infrastructure for Security Misconfiguration using Qualys Total Cloud

Chapter 10: Learn Docker and Kubernetes Commands for DevSecOps Interview

Lecture 1: Notes on Docker Commands

Lecture 2: Sample Dockerfile

Lecture 3: Notes on Kubernetes Commands

Lecture 4: Sample kubernetes Deployment file to deploy Docker container with load balancer

Chapter 11: Next Steps

Lecture 1: DevSecOps Handbook

Lecture 2: Application Security As a Career

Lecture 3: Sample DevSecOps Engineer CV

Lecture 4: Bonus Lecture