Amazon Web Services (AWS)
Security Engineering on AWS
Engineer strong security into AWS workloads.
3 daysIntermediate15 modulesAWS Certified Security - Specialty
About this course
Engineer strong security into AWS workloads. Over three days you will manage identity and access, protect web applications and data with encryption, secure networks and traffic, centralise logging and monitoring and respond to incidents, preparing for the Security Specialty exam.
Curriculum
15 modules
- Understand the AWS Shared Responsibility Model
- Explore core cloud security principles
- Review incident response strategies in AWS
- Align DevOps processes with security engineering
- Define and apply IAM policies, roles, and permissions boundaries
- Use IAM Access Analyzer for insight into access risks
- Implement multi-factor authentication (MFA)
- Monitor access activity with AWS CloudTrail
- Analyze threats to 3-tier application architectures
- Address common risks around user and data access
- Leverage AWS Trusted Advisor for continuous improvement
- Harden Amazon Machine Images (AMIs)
- Perform automated security assessments with Amazon Inspector
- Apply secure configuration management with AWS Systems Manager
- Encrypt data in S3, RDS, DynamoDB, and Glacier
- Apply key management strategies using AWS KMS
- Use S3 Access Analyzer and Access Points for precise control
- Implement best practices for securing Amazon VPCs
- Use VPC Traffic Mirroring for deep packet inspection
- Respond to compromised instances
- Secure endpoints with AWS Certificate Manager and ELB
- Configure CloudWatch, AWS Config, and Amazon Macie
- Enable VPC Flow Logs, ELB Logs, and S3 Server Access Logs
- Aggregate log data with Amazon Kinesis
- Analyze security events using Amazon Athena
- Connect environments with VPNs and Direct Connect
- Secure cross-region traffic with AWS Transit Gateway
- Use Route 53 and CloudFront for edge-level protection
- Defend against attacks with AWS WAF, Shield, and Firewall Manager
- Control access in serverless environments with Amazon Cognito
- Secure APIs with API Gateway
- Implement least-privilege execution in AWS Lambda
- Identify suspicious activity with Amazon GuardDuty
- Consolidate findings in AWS Security Hub
- Perform forensic analysis with Amazon Detective
- Manage encryption keys using AWS KMS and CloudHSM
- Store and rotate secrets with AWS Secrets Manager
- Create secure, repeatable deployments with AWS CloudFormation
- Standardize infrastructure with AWS Service Catalog
- Manage multi-account environments with AWS Organizations
- Enforce controls using AWS Control Tower and AWS SSO
- Integrate centralized identity with AWS Directory Services
Who it's for
Security engineers, architects and analysts responsible for AWS environments.
Before you start
- Working knowledge of IT security practices and infrastructure concepts
- Familiarity with cloud computing concepts
- Completed AWS Security Essentials and Architecting on AWS courses
Prepares for
Related courses
More in Amazon Web Services (AWS) →Foundation
AWS Cloud Practitioner Essentials
Amazon Web Services (AWS)
View course →Foundation
AWS Security Essentials
Amazon Web Services (AWS)
View course →Advanced
Advanced Architecting on AWS
Amazon Web Services (AWS)
View course →Advanced
Advanced Developing on AWS
Amazon Web Services (AWS)
View course →Advanced
Advanced Generative AI Development on AWS
Amazon Web Services (AWS)
View course →Advanced
Architecting on AWS
Amazon Web Services (AWS)
View course →Let's plan your next step together.
Tell us the course or certification you have in mind and we'll send the outline, upcoming dates, fees and private-team options.