AWS Advanced Security: SecOps Automation for the cloud

Course Curriculum

Chapter 1: Course Introduction

Lecture 1: Welcome to 'AWS Cloud Security: Proactive Way' Course

Chapter 2: Detective Controls: Introduction

Lecture 1: AWS Config: What Is It?

Lecture 2: AWS Config: How It Works?

Lecture 3: AWS Config: Introduction to Config Rules

Lecture 4: AWS Config: How to configure Config Rules

Lecture 5: AWS Config: Identify Non Compliant Rules & Resources

Lecture 6: AWS Config: Introduction to Advanced Querying

Lecture 7: AWS Config: Advanced Querying In Action

Lecture 8: AWS Config: Introduction to Multi Account Aggregators

Lecture 9: Learn how to aggregate compliance status in AWS

Chapter 3: Reactive Controls: Automatically Remediate Non Compliant Resources

Lecture 1: Introduction to Auto Remediation

Lecture 2: Automatically Enforce S3 Bucket Versioning

Lecture 3: Automatically Enforce S3 Bucket Encryption

Lecture 4: Automatically Enforce 'No Public IPs for EC2 Instances' Policy

Lecture 5: Automatically Enforce AMI ID Compliance for all EC2 Instances

Lecture 6: Automatically Enforce compliance to AMI ID by Tags for all EC2 Instances

Lecture 7: Compliance Best Practices & Tribal Knowledge – commonly used rules

Lecture 8: How to setup custom compliance rules?

Lecture 9: Monitor & Flag Unused IAM Roles using Config Custom Rules

Lecture 10: Monitor & Flag Users With Excessive Privileges

Chapter 4: Proactive Security Controls

Lecture 1: Automatically Remediate AWS Cloutrail Disabling: Monitor, Alert, ReEnable

Lecture 2: Monitor & Automatically Revoke Unintended IAM Access

Lecture 3: Automatically Remove Unused Security Groups

Lecture 4: Proactively monitor & fix bad or overly permissive S3 Object ACLs

Lecture 5: Proactively monitor and fix bad or overly permissive S3 Bucket Policies

Lecture 6: Proactively monitor and respond to failed SSH logins to EC2 Instances

Lecture 7: Automatically rotate EC2 SSH keys for ALL your instances reliably

Lecture 8: Proactively Block S3 Public Access At Scale

Lecture 9: Attribute Based Access Control: Proactively Restrict S3 Access based on UserTags

Lecture 10: Attribute Based Access Control: Proactively Restrict Access To EC2 Based On Tags

Chapter 5: Proactive Security Controls: Taking it to the next level

Lecture 1: Learn how to create fine grained permissions like a PRO

Lecture 2: Use AWS Secrets Manager to secure database credentials and retrieve from lambda

Lecture 3: Use an outbound VPC proxy for domain whitelisting and content filtering

Lecture 4: Use AWS IAM Access Analyzer to Identify Unintended Resource Access

Lecture 5: Automatically respond to DDoS Attacks with Web Application Firewall(WAF)

Lecture 6: Detect EC2 Instance Credential Abuse

Lecture 7: Automatically respond to EC2 Instance Credential Abuse – Part 01 of 02

Lecture 8: Automatically respond to EC2 Instance Credential Abuse – Part 02 of 02

Chapter 6: Next Steps: Assignment

Chapter 7: Resources

Lecture 1: Table of Resources

Chapter 8: Additional Reading

Lecture 1: Security Whitepapers