Continuous Compliance, Encryption, and Security on AWS (The DevSecOps Series on AWS)

Video description

Continuous Compliance, Encryption, and Security on AWS (The DevSecOps Series on AWS)

Video description

Overview
Continuous Compliance, Encryption, and Security on AWS is a series of video courses that will help you use AWS services to define compliance and encryption as code, and to create an end-to-end continuous security solution. These services include AWS Config Rules, Amazon EventBridge Rules, AWS CloudFormation, AWS CodePipeline, AWS Lambda, AWS Key Management Service, AWS CodeCommit, AWS CodeBuild, AWS Step Functions, AWS Organizations, AWS Security Hub, Amazon GuardDuty, Amazon Inspector, AWS Secrets Manager, Amazon VPC, Amazon Macie, AWS Audit Manager, and many others.

You will learn how to use a combination of these tools to prevent, detect, encrypt, and remediate noncompliant resources in your software systems. The videos in this series will also help you apply design principles for security and build continuous security solutions. Paul Duvall has multiple AWS certifications including AWS Certified Security - Specialty. He has architected, implemented, and managed software and systems solutions for more than 20 years. Throughout the series, you will have the opportunity to work along with Paul as he demonstrates how to automate the provisioning, encryption and security of these services, and how to include them as part of a deployment pipeline using AWS CloudFormation and AWS CodePipeline.

Courses include

Continuous Compliance on AWS (The DevSecOps on AWS Series) LiveLessons (Video Training)
Continuous Encryption on AWS (The DevSecOps on AWS Series) LiveLessons (Video Training)
Continuous Security on AWS (The DevSecOps on AWS Series) LiveLessons (Video Training)

Skill Level

Intermediate to Advanced

Learn How To

Apply key compliance, encryption, and security concepts on AWS.
Use AWS services and tools to automate compliance, encryption, and security into your software delivery process.

Who Should Take This Course

Software developers and security and compliance professionals who want to integrate compliance, encryption, and security into every facet of the software development and delivery process.
Professionals with a working knowledge of AWS and programming experience who want to make compliance, encryption, and security ubiquitous across their systems.

Course Requirements

Working knowledge of AWS (for example, 1-2+ years working with AWS).
Knowledge of AWS CloudFormation.
Practical experience with high-level programming experience, such as Python, Java, Node.js, etc. is helpful.

About the Author
Paul Duvall was a founder and CTO of an AWS Premier Consulting Partner for over 10 years. He was an AWS Hero from 2016-2021. He has multiple AWS certifications including AWS Certified Security - Specialty. He has architected, implemented, and managed software and systems solutions for more than 20 years. He is the principal author of Continuous Integration: Improving Software Quality and Reducing Risk (Addison-Wesley, 2007), a 2008 Jolt Award Winner, and author of many other publications, including DevOps Essentials on AWS LiveLessons (Addison-Wesley, 2017). He's written for several publications including Forbes and Stelligent and hosted the "DevOps on AWS Radio" podcast.

About Pearson Video Training
Pearson publishes expert-led video tutorials covering a wide selection of technology topics designed to teach you the skills you need to succeed. These professional and personal technology videos feature world-leading author instructors published by your trusted technology brands: Addison-Wesley, Cisco Press, Pearson IT Certification, Sams, and Que Topics include: IT Certification, Network Security, Cisco Technology, Programming, Web Development, Mobile Development, and more. Learn more about Pearson Video training at http://www.informit.com/video.

Introduction

Continuous Compliance on AWS LiveLessons: Introduction

0.1 The Current State of Compliance

0.2 Setup Development Environment

Lesson 1: Automating AWS Resources

Learning objectives

1.1 AWS CloudFormation

1.2 AWS CodePipeline

1.3 Launch a CloudFormation stack that deploys a deployment pipeline

1.4 Lesson 1 Quiz

Lesson 2: Preventive Controls

Learning objectives

2.1 Describe cfn_nag

2.2 Run cfn_nag from the command line

2.3 Configure cfn_nag to run from CodePipeline

2.4 Lesson 2 Quiz

Lesson 3: Detective Controls

Learning objectives

3.1 Describe AWS Config and Config Rules

3.2 Setup AWS Config Rules via console

3.3 Run Managed Config Rules from the console

3.4 Run Managed Config Rules using CloudFormation

3.5 Lesson 3 Quiz

Lesson 4: More Detective Controls

Learning objectives

4.1 Describe Custom Config Rules

4.2 Describe CloudWatch Event Rules

4.3 Setup Custom Config Rules using the Rules Development Kit (RDK)

4.4 Lesson 4 Quiz

Lesson 5: Automated Remediation

Learning objectives

5.1 Describe different ways to perform automatic remediations

5.2 Run an AWS Config Rule auto remediation routine from the Console

5.3 Run an AWS Config Rule auto remediation routine from CloudFormation

5.4 Lesson 5 Quiz

Lesson 6: Continuous Compliance

Learning objectives

6.1 Describe prevention, detection, and remediation workflow

6.2 Manually provision an automatic remediation solution using AWS Console

6.3 Create deployment pipeline for detection and remediation workflow

6.4 Lesson 6 Quiz

Summary

Continuous Compliance on AWS LiveLessons: Summary

Introduction

Continuous Encryption on AWS (The DevSecOps on AWS Series) LiveLessons (Video Training): Introduction

The Current State of Encryption

Setup Development Environment

Lesson 1: Automating AWS Resources

Learning objectives

1.1 AWS CloudFormation

1.2 AWS CodePipeline

1.3 Launch a deployment pipeline stack

1.4 Lesson 1 Quiz

Lesson 2: Key Management

Learning objectives

2.1 Create KMS Keys in Console

2.2 Create a Customer-Managed CMK using AWS CloudFormation

2.3 Lesson 2 Quiz

Lesson 3: Developing with Encryption

Learning objectives

3.1 AWS Encryption SDK

3.2 AWS Secrets Manager

3.3 Lesson 3 Quiz

Lesson 4: Encryption in Transit

Learning objectives

4.1 AWS Certificate Manager and Amazon CloudFront in Console

4.2 Launch Encryption in Transit solution with AWS CloudFormation and AWS CodePipeline

4.3 Lesson 4 Quiz

Lesson 5: Encryption at Rest

Learning objectives

5.1 Encryption at rest for AWS EBS, Amazon RDS, Amazon DynamoDB, and Amazon S3

5.2 Encrypt a DynamoDB database using AWS CloudFormation

5.3 Lesson 5 Quiz

Lesson 6: Detecting Encrypted Resources

Learning objectives

6.1 Create AWS Config Rules in Console

6.2 Launch a Managed Config Rule via AWS CloudFormation

6.3 Lesson 6 Quiz

Lesson 7: Logging and Searching KMS Keys

Learning objectives

7.1 Create an AWS CloudTrail log in Console

7.2 Provision a CloudTrail log and search KMS keys

7.3 Lesson 7 Quiz

Lesson 8: Continuous Encryption

Learning objectives

8.1 Manually create encryption prevention, detection, and remediation workflow in Console

8.2 Deployment pipeline for encryption prevention, detection, and remediation workflow in CloudFormation

8.3 Lesson 8 Quiz

Summary

Continuous Encryption on AWS (The DevSecOps on AWS Series) LiveLessons (Video Training): Summary

Introduction

Continuous Security on AWS: Introduction

0.1 AWS Security Concepts

0.2 AWS Security Practices and Resources

Lesson 1: Common Tools for Continuous Security

Learning objectives

1.1 Amazon CloudWatch

1.2 AWS CodePipeline

1.3 AWS Cloud9

1.4 AWS CloudFormation

1.5 Amazon EventBridge

1.6 AWS Step Functions

1.7 AWS Systems Manager

1.8 AWS Lambda

1.9 Deployment Pipeline Architectures

1.10 Demo: Setup Dev Environment and CD Pipelines

Lesson 2: Identity and Access Management

Learning objectives

2.1 AWS IAM

2.2 AWS Single-Sign On

2.3 Amazon Cognito

2.4 AWS Directory Service

2.5 AWS Resource Access Manager

2.6 AWS Organizations

2.7 Deployment Pipeline Architectures

2.8 Demo: AWS Organizations

Lesson 3: Detection and Incident Response

Learning objectives

3.1 AWS Security Hub

3.2 Amazon GuardDuty

3.3 Amazon Inspector

3.4 AWS Config

3.5 AWS CloudTrail

3.6 AWS IoT Device Defender

3.7 Amazon Detective

3.8 CloudEndure Disaster Recovery

3.9 Services Pipelines: Shift Left

3.10 Deployment Pipeline Architectures

3.11 Demo: AWS Security Hub

Lesson 4: Infrastructure Protection

Learning objectives

4.1 AWS Shield

4.2 AWS Web Application Firewall

4.3 AWS Firewall Manager

4.4 Amazon VPC

4.5 Deployment Pipeline Architectures

4.6 Demo: Amazon VPC

Lesson 5: Data Protection

Learning objectives

5.1 Amazon Macie

5.2 AWS Key Management Service (KMS)

5.3 AWS CloudHSM

5.4 AWS Certificate Manager (ACM)

5.5 AWS Secrets Manager

5.6 Deployment Pipeline Architectures

5.7 Demo: Amazon Macie

Lesson 6: Compliance

Learning objectives

6.1 AWS Artifact

6.2 AWS Audit Manager

6.3 Demo: AWS Audit Manager

Lesson 7: Deployment Architectures

Learning objectives

7.1 Deployment Architecture Consdierations for Security

7.2 Demo: Container Security

Summary

Continuous Security on AWS: Summary

Start your Free Trial

Self paced

Go to the Course
We have partnered with providers to bring you collection of courses, When you buy through links on our site, we may earn an affiliate commission from provider.