Cheat sheets
Our catalog of cloud security cheat sheets
Showing 1–12 of 21 cheat sheets
-
- Infrastructure as code
- Security testing & tools
Checkov: IaC and Policy as Code Scanning
Scan infrastructure as code with Checkov: CLI options, scan scope, baselines, secrets, and custom Python policies for VPCs and EC2.
- Checkov
- Terraform
- Policy as Code
- CI/CD
- Python
-
- Encryption & key management
- Identity & access
AWS Secrets Manager Best Practices
Ten best practices for storing, encrypting, caching, rotating, and monitoring secrets, with least-privilege access and private networking.
- Secrets Manager
- AWS KMS
- Secret rotation
- VPC endpoints
-
- Security testing & tools
- Logging & monitoring
Continuous AWS Security Assessments with Prowler and Security Hub
Run Prowler in CodeBuild, store reports in S3, send findings to Security Hub, and repeat with EventBridge Scheduler.
- Prowler
- Security Hub
- CodeBuild
- Amazon S3
- EventBridge Scheduler
-
- Network security
Security Groups vs. NACLs
Security Groups vs. NACLs Cheat Sheet
- Security Groups
- Network Access Control Lists
- VPC
-
- Logging & monitoring
AWS CloudTrail Security Controls
Best Practices Checklist
- CloudTrail
- AWS Security Hub
- AWS Config
- Security controls
-
- Logging & monitoring
CloudTrail CLI
Syntax-highlighted AWS CLI commands for trails, event history, local log searches, and Insights, plus guidance on querying CloudTrail data with CloudWatch Logs Analytics.
- AWS CLI
- CloudTrail
- Event history
- CloudWatch Logs Analytics
- Insights
-
- Identity & access
Anatomy of IAM Policies in AWS
Understand IAM policy elements, annotated JSON examples, and cross-account access with role trust and permissions policies.
- IAM policies
- Policy elements
- Cross-account access
- Trust policies
- AWS STS
-
- Identity & access
AWS IAM Identity Center
Manage workforce access with single sign-on, permission sets, and temporary credentials.
- Single sign-on
- Permission sets
- Federation
- Temporary credentials
- AWS CLI
-
- Encryption & key management
AWS Key Management Service (KMS)
Getting Started Cheat Sheet
- AWS KMS
- Key policies
- Data keys
- Encryption
- Grants
-
- Encryption & key management
Encrypt and Decrypt Data with KMS and Data Keys
Learn how to encrypt and decrypt data with KMS keys and with Data Keys.
- AWS KMS
- Symmetric encryption
- Envelope encryption
- Data keys
- AWS Encryption SDK
-
- AWS fundamentals & certification
AWS Native Security Services
This represents a list of AWS’ native security services, broken down by category and explained in high-level detail.
- IAM
- Detection and response
- Network protection
- Data protection
- Compliance
-
- AWS fundamentals & certification
AWS Services, Features, Concepts, Tools
In-scope for the Security Specialty Exam (SCS-C03)
- Concepts & Tools
- Management and Governance
- Networking and Content Delivery Security
- Security, Identity, and Compliance
