AWS All-in-one Security Guide

Preface

Introduction to Security in AWS

• Introduction
• Shared responsibility model
• Important AWS security service offerings
• Security Guidance
• Quick Note on AWS Management Console
• Conclusion

Identity and Access Management

• Introduction
• Fundamentals of IAM
• Identity
• Access Management
• AWS tools for IAM
• Conclusion

Infrastructure Security

• Introduction
• AWS Global Infrastructure
• Securing networks with Virtual Private Cloud
• Patch management
• Secure SSH and RDP session management
• IP filtering
• Vulnerability assessment
• Distributed Denial of Service and AWS Shield
• Conclusion

Data Security

• Introduction
• Fundamental concepts of securing data
• AWS Key Management Service (KMS)
• AWS CloudHSM
• Amazon S3
• Amazon EBS
• Amazon DynamoDB
• Amazon RDS
• Amazon Macie for data loss prevention
• Conclusion

Application Security

• Introduction
• Securing APIs
• AuthN/AuthZ with Amazon Cognito
• Securing web applications hosted on Amazon S3 and CloudFront
• Externalizing the secrets and configuration parameters
• Web Application Firewall
• Securing applications with load balancer
• Conclusion

Logging, Monitoring, and Auditing

• Introduction
• Amazon CloudWatch
• AWS CloudTrail
• Important logs managed by AWS
• AWS config
• Amazon GuardDuty
• AWS Security Hub
• Amazon Detective
• AWS Artifact
• AWS Service Catalog
• Conclusion

Security Best Practices

• Introduction
• Shared responsibility model
• IAM best practices
• Infrastructure security best practices
• Data security best practices
• Application security best practices
• Logging and monitoring best practices
• Conclusion