The AWS Certified Security Specialty certification course provides comprehensive training in advanced cloud security and securing applications within the AWS environment.  By completing this course, participants will be able to understand the AWS shared security responsibility model, design robust security infrastructures to thwart common threats, implement advanced encryption methods to protect data, and employ automated security checks. They'll also learn how to configure secure authentication, analyze logs for security insights, and respond to security incidents. Prerequisites include a foundational knowledge of AWS Cloud, AWS Security fundamentals, and a background in IT security practices. This knowledge will enable you to effectively secure your organization’s AWS infrastructure and protect it against cyber threats. With our AWS Certified Security Specialty Training, you will acquire the necessary knowledge to successfully pass the certification exam and gain hands-on experience in advanced cloud security.

Course Objectives:

In this course, you will learn to:

• Identify security benefits and responsibilities when using the AWS Cloud
• Describe the access control and management features of AWS
• Understand the different data encryption methods to secure sensitive data
• Describe how to secure network access to your AWS resources
• Determine which AWS services can be used for monitoring and incident response.
• Understand and apply the AWS shared security responsibility model to ensure clear demarcation of security ownership.
• Design and implement secure AWS application infrastructures to guard against prevalent security threats.
• Implement strategies to protect data at rest and in transit using advanced encryption methods.
• Utilize automated tools for consistent security checks and vulnerability analyses across AWS resources.
• Configure robust authentication mechanisms to control access to AWS resources and applications.
• Monitor and analyze logs effectively to gain insights into operational and security events within the AWS ecosystem.
• Identify potential security threats and implement strategies to mitigate risks to applications and data.
• Conduct thorough security assessments to identify vulnerabilities and enforce adherence to security best practices.
• Manage AWS accounts securely and understand the implications of security settings and policies.
• Learn to automate security responses and incident resolution to enhance the overall security posture on AWS.

Course content

Introduction to Cloud Security

• What is Cloud Security?
• Benefits of Cloud Security

Secure Global Infrastructure and Compliance

• Region, Availability Zones
• VPC Endpoints
• IAM and Compliance

Security of the Cloud

• Shared responsibility model
• AWS Global Infrastructure
• Compliance and governance
• Trusted Advisor

Incident Response 

• What is incident response in cloud?
• Foundation of incident response
• Prepare for cloud security – People and technology
• Simulate incident response
• Shared responsibility model and AWS CAF
• Where do cloud security events occur?
• Amazon GuardDuty and its concepts
• Incident response plan
• CloudEndure disaster recovery
• Amazon detective

Lab:

• Amazon GuardDuty
• Amazon detective

Logging and Monitoring 

• Introduction to CloudWatch
• Metrics and namespaces
• CloudWatch architecture
• Dashboards in CW
• CloudWatch alarms
• CloudWatch logs
• Pricing and design patterns
• Introduction to CloudTrail
• Accessing CloudTrail and tracking API usage

Lab:

• Creating a CloudWatch dashboard and adding metrics
• Creating a CloudWatch alarm that triggers according to the CPU utilization of an EC2 instance
• Creating a billing alarm
• Creating a log group
• Creating a trail

Infrastructure Security 

• Network security
• Network monitoring and protection
• Firewalls and DDoS
• Content delivery networks and edge locations
• Intrusion detection and prevention systems
• AWS Shield
• AWS CloudFront and Signed URLs
• Lambda@Edge
• AWS Network Firewall

Lab:

• Creating and configuring an AWS network firewall
• Creating a stateful rule group in network firewall

Identity and Access Management 

• Pre-IAM and why access management?
• Amazon resource name (ARN) and IAM features
• Multi-factor authentication (MFA) in IAM and JSON
• IAM policies and IAM permissions
• IAM roles
• Identity federation and pricing
• Data access and protection essentials

Lab:

• Creating IAM users and a group
• Creating an IAM policy and attaching it to the group
• Creating an IAM role
• Setting up MFA for a user
• Introduction to Security Policies

Data Protection 

• Introduction to cryptography
• Cryptography terminologies and concepts
• Symmetric and asymmetric key encryption
• CloudHSM
• AWS KMS
• Data protection in KMS
• KMS policy evaluation logic
• AWS secrets manager

Lab:

• Importing key material to KMS
• Creating a secret and rotating it using AWS secrets manager
• Deploying SSL-TLS certificate with ACM

Protecting Infrastructure and Data

• Protecting your network infrastructure
• Edge Security
• DDoS Mitigation
• Protecting compute resources
• Lab: Securing VPC Resources with Security Groups

Detection and Response

• Monitoring and detective controls
• Incident response essentials

To see the full course content Download now