Course Description

AWS Security Essentials covers fundamental AWS Cloud security concepts, including AWS access control, data encryption methods, and how network access to your AWS infrastructure can be secured. Based on the AWS Shared Security Model, this course teaches where in the AWS Cloud you are responsible for implementing security. You'll also learn what security-oriented services are available to you, as well as why and how the security services can help meet the security needs of your organisation.

Target Student

This course is intended for:

• IT business-level professionals interested in cloud security practices
• Security professionals with minimal working knowledge of AWS

Pre-requisites

We recommend that attendees of this course have the following prerequisites:

• Working knowledge of IT security practices and infrastructure concepts
• Familiarity with cloud computing concepts

Performance Based Objectives

This course is designed to teach you how to:

• Identify security benefits and responsibilities of using the AWS Cloud.
• Describe the access control and management features of AWS.
• Explain the available methods for encrypting data at rest and in transit.
• Describe how to secure network access to your AWS resources.
• Determine which AWS services can be used for monitoring and incident response.

Certifications

This course is part of the following Certifications:

• AWS Certified Security – Speciality

To earn this certification, you'll need to take and pass the AWS Certified Security – Speciality exam (SCS-C01). The exam features a combination of two question formats: multiple choice and multiple response.

Course Content

Module 1 - Security on AWS

• Security design principles in the AWS Cloud
• AWS Shared Responsibility Model

Module 2 - Security OF the Cloud

• AWS Global Infrastructure
• Data Centre Security
• Compliance and Governance

Module 3 - Security IN the Cloud – Part 1

• Identity and Access Management
• Data Protection
• Lab 01 – Introduction to Security Policies

Module 4 - Security IN the Cloud – Part 2

• Securing your infrastructure
• Monitoring and detective controls
• Lab 02 – Securing VPC Resources with Security Groups

Module 5 - Security IN the Cloud – Part 3

• DDoS mitigation
• Incident response essentials
• Lab 03 – Automating Incident Response with AWS Config and AWS Lambda

Module 6 - Course Wrap Up

• AWS Well-Architected tool overview

AWS® is a registered trademark of Amazon.com, Inc. in the United Kingdom and other countries.