Cloud Security
AWS Security
Securing accounts, networks and workloads on Amazon Web Services.
- 6 notes
- 53 minutes of reading
- AWS IAM basics: root account, users, groups, roles and least privilegeThe core of AWS Identity and Access Management: protecting the root user, users versus roles, writing policies, how AWS evaluates permissions, and applying least privilege. 9 min · Beginner
- AWS VPC security: security groups, network ACLs, subnets and NATHow to secure an Amazon VPC: security groups versus network ACLs, public and private subnet design, NAT gateways, VPC endpoints and flow logs. 9 min · Intermediate
- Securing Amazon S3: public access, bucket policies, encryption and loggingA practical guide to protecting Amazon S3 buckets with Block Public Access, bucket policies, encryption, versioning, Object Lock, logging and data discovery. 9 min · Intermediate
- AWS logging and detection: CloudTrail, CloudWatch, GuardDuty and Security HubWhat each AWS logging and detection service does, how they fit together, which events to alert on, and how to build a sensible baseline for a new account. 9 min · Intermediate
- Encryption on AWS: KMS keys, envelope encryption and key policiesHow AWS Key Management Service works, the types of KMS key, envelope encryption, key policies and grants, rotation, and encrypting data in transit. 9 min · Intermediate
- The AWS Well-Architected security pillar in practiceThe design principles and best-practice areas of the AWS Well-Architected Framework security pillar, with practical examples of applying each one to a real workload. 8 min · Intermediate