• Labs
    • Learning Paths
    • CybrBits
    • All Courses
    • Join Discord
    • Contact & Support
    • Blog
    • Cheat Sheets
    • Ebooks
    • Podcasts
    • Webinars
  • Pricing
    • Training
    • Hosted Labs
    • Consulting
Sign in Sign up
AWS Certified Security Specialty Course

19 sections · 222 lessons

  • Video
  • Lab
  • Cheat sheet
  • Reading
  1. 1 About the course and exam
    1. Video: About this course (please watch) Preview
    2. Video: About the exam
    3. Cheat sheet: [Cheat Sheet] Services you need to focus on learning
    4. Reading: Course resources and downloads
    5. Reading: Tips & tricks from learners who passed the exam
  2. 2 Getting Started
    1. Reading: Our community
    2. Video: Create and configure your AWS account
    3. Video: Secure the root user
    4. Video: Set up Budget Alarms
    5. Reading: Install tools and configure your machine
  3. 3 Centrally deploy and manage AWS accounts
    1. Video: The AWS SRA Project
    2. Video: AWS Organizations
    3. Video: About SCPs
    4. Video: Deploying SCPs
    5. Video: Testing SCPs
    6. Video: Resource Control Policies (RCPs)
    7. Video: AWS Control Tower
    8. Reading: [Quiz] Centrally deploy and manage AWS accounts
    9. Video: Tagging best practices
  4. 4 Design, implement, and troubleshoot authorization for AWS resources
    1. Video: What are IAM roles?
    2. Video: Managed vs. Inline Policies
    3. Cheat sheet: [Cheat Sheet] Anatomy of an IAM Policy
    4. Video: Identity-based policies vs. resource-based policies
    5. Video: IAM permissions boundaries
    6. Video: Session control policies
    7. Video: Policy evaluation flow
    8. Video: Common policy conditions
    9. Reading: [Quiz] IAM Policies Roles and Permissions in AWS
    10. Video: Trusted Entity Types
    11. Video: Creating a service role
    12. Video: Service-linked roles
    13. Video: Cross-account access with roles
    14. Reading: [Quiz] Cross account access
    15. Video: Cross-account roles for 3rd party access (prevent confused deputy)
    16. Video: ABAC and RBAC for access control
    17. Video: IAM Roles Anywhere
    18. Reading: [Quiz] IAM Advanced Access Control
  5. 5 Design, implement, and troubleshoot authentication for AWS resources
    1. Video: IAM Users vs. Identity Center Users
    2. Video: Enable Identity Center (SSO)
    3. Cheat sheet: [Cheat Sheet] IAM Identity Center
    4. Video: Delegating administration of Identity Center
    5. Video: Creating permission sets (roles) from delegated admin
    6. Video: Assuming roles created through Identity Center
    7. Video: Centrally managing root access
    8. Lab: IAM Credentials Report
    9. Video: AWS Directory Service
    10. Video: About Amazon Cognito
    11. Reading: [Quiz] AWS Identity Center and Federated Access Management
  6. 6 AWS security tools and services
    1. Video: AWS Trusted Advisor
    2. Video: About AWS CloudTrail
    3. Video: Management, Data, and Insights Events
    4. Video: The 3 ways of recording data
    5. Cheat sheet: [Cheat Sheet] CloudTrail Events and Data Recording
    6. Video: Log file integrity
    7. Video: Log file encryption
    8. Video: Deploying AWS CloudTrail Organization Trail
    9. Video: Centralized CloudTrail Lake for Incident Response
    10. Reading: [Quiz] CloudTrail Security and Logging
    11. Video: About Amazon CloudWatch
    12. Video: About Amazon GuardDuty
    13. Reading: [LAB] Amazon GuardDuty Demo
    14. Video: Delegating and Centralizing GuardDuty
    15. Video: Amazon EventBridge
    16. Video: Amazon Detective
    17. Video: Delegating and Centralizing Detective
    18. Video: [LAB] Amazon Inspector
    19. Video: About AWS Security Hub CSPM
    20. Video: Delegating and Centralizing Security Hub CSPM
    21. Reading: [Quiz] Security Monitoring and Threat Detection
  7. 7 Amazon S3 Security
    1. Video: Managing access to S3 buckets
    2. Cheat sheet: [Cheat Sheet] S3 Bucket Policies vs. ACLs vs. IAM Policies
    3. Reading: [LAB] [Challenge] Create an IAM role for secure access to S3 based on a scenario
    4. Video: Using Signed URLs
    5. Reading: [LAB] S3 Presigned URLs
    6. Reading: [Quiz] S3 Access Control
    7. Video: Encrypting S3 data
    8. Reading: [Quiz] S3 Data Encryption
    9. Video: S3 Access Points
    10. Video: S3 Access Grants
    11. Reading: [Quiz] Managing S3 Access at Scale
    12. Video: IAM Access Analyzer for S3
    13. Video: S3 CORS
    14. Video: [DEMO] Enable S3 Object Versioning
    15. Video: S3 Object Lock
    16. Cheat sheet: [Cheat Sheet] Amazon S3 Protection Summary
    17. Cheat sheet: [Cheat Sheet] Create a least privilege S3 bucket policy
    18. Reading: [Quiz] Protecting S3 Data
    19. Video: Amazon S3 Storage Classes
    20. Video: Amazon S3 Glacier
    21. Reading: [Quiz] S3 Storage Classes
  8. 8 Protecting data, credentials, and secrets
    1. Video: AWS KMS
    2. Video: The lifecycle of a KMS key
    3. Video: Cross-account and multi-region keys
    4. Video: Key aliases
    5. Video: [DEMO] Creating a Symmetric Encryption KMS Key
    6. Cheat sheet: [Cheat Sheet] Encrypt and Decrypt Data with KMS and Data Keys
    7. Reading: [LAB] Encrypt and Decrypt Data with KMS and Data Keys
    8. Reading: [Scenario] [FREE] S3 bucket access denied issues
    9. Video: Imported keys and external key stores
    10. Video: Monitoring keys and encryption
    11. Video: EBS Volume Encryption
    12. Video: Amazon Elastic File System (EFS)
    13. Video: AWS Secrets Manager
    14. Video: Rotating secrets
    15. Video: Replicate secrets across regions
    16. Video: Cross-account secrets access
    17. Video: AWS Systems Manager Parameter Store
    18. Video: Securing Amazon RDS
    19. Reading: [LAB] Encrypting an unencrypted RDS database
    20. Video: Creating and managing certificates
    21. Video: Data replication and backups
    22. Video: GenAI Security Controls in AWS and OWASP Top 10
  9. 9 Secure and consistent deployment strategy for cloud resources
    1. Video: About AWS CloudFormation
    2. Video: Deploying resources with CloudFormation
    3. Video: Multi-account and multi-region deployments
    4. Video: Detecting and fixing drift
    5. Reading: [LAB] CloudFormation Guard
    6. Reading: [Quiz] CloudFormation
    7. Video: Using AWS Service Catalog - Part 1
    8. Video: Using AWS Service Catalog - Part 2
    9. Video: About AWS Firewall Manager
    10. Video: Using AWS RAM to share resources across accounts
    11. Reading: [Quiz] Service Catalog and Firewall Manager
    12. Video: Security tools for code vulnerabilities
  10. 10 Compliance and automatic remediation of AWS resources
    1. Video: About AWS Config
    2. Video: Delegating AWS Config
    3. Video: AWS Config Initial Setup
    4. Video: About AWS Systems Manager (SSM)
    5. Video: AWS Config Automated Remediation with SSM
    6. Reading: [LAB] Automated S3 Remediation to Enforce Block Public Access
    7. Reading: [LAB] Remediate Open SSH Security Groups with AWS Config and SSM
    8. Video: Monitoring AWS Config with EventBridge
    9. Video: Customizing and monitoring EventBridge rules
    10. Video: Transforming events with EventBridge
    11. Video: Multi-account AWS Config
    12. Video: AWS Config Aggregators and Advanced Queries
    13. Video: AWS Config Multi-Account Conformance Packs
    14. Reading: [Quiz] AWS Config and EventBridge
    15. Video: AWS SSM Patch Manager and Run Command
    16. Video: About Amazon Macie
    17. Video: Deploying Amazon Macie
    18. Video: About AWS Audit Manager
    19. Video: Running assessments with Audit Manager
    20. Video: Evidence and generating reports with Audit Manager
    21. Video: AWS Artifact
    22. Video: About Amazon SNS for Data Protection
    23. Reading: [Quiz] Macie, SNS, and Audit Manager
  11. 11 Securely deploying and accessing compute resources
    1. Reading: VPCs and their components
    2. Video: [LAB] [DEMO] Launch and connect to EC2 instances
    3. Video: SSM Session Manager
    4. Reading: [LAB] Secure EC2 Access with SSM Session Manager and KMS
    5. Video: Hardening EC2 AMIs and Container Images
    6. Reading: [Quiz] Securely deploying and accessing compute resources
    7. Video: Elastic Load Balancers
    8. Video: ELB Health Checks and Encryption
    9. Video: ELB Logging and Metrics
    10. Video: VPC Endpoints and AWS PrivateLink
    11. Video: AWS hybrid and remote connectivity
    12. Video: Amazon VPC Network Access Analyzer
    13. Video: Code Signing with AWS Signer
  12. 12 Design, Implement, and Troubleshoot CloudWatch Logging
    1. Video: Centralized CloudWatch Logging
    2. Video: Configure the Amazon unified CloudWatch agent
    3. Reading: [LAB] Install and Configure the Amazon CloudWatch Unified Agent on EC2
    4. Video: CloudWatch Logs data protection policies
    5. Reading: [LAB] Protect CloudWatch Logs data with masking policies
    6. Reading: [Cheat Sheet] Troubleshoot CloudWatch Agent configurations
    7. Reading: [Quiz] CloudWatch logging
  13. 13 Working with security logs
    1. Video: [LAB] Amazon VPC Flow Logs
    2. Video: Transit Gateway Flow Logs
    3. Video: Amazon Route 53 Resolver query logs
    4. Video: [DEMO] Enable S3 Server Access Logs
    5. Reading: [LAB] S3 Server Access Logs – AWS Console
    6. Reading: [LAB] S3 Server Access Logs – CLI
    7. Reading: [Quiz] Network Flow Logs and Access Logs
    8. Video: About Athena
    9. Video: [DEMO] Using Athena with CloudTrail logs
    10. Video: About AWS Glue
    11. Video: Amazon Security Lake
    12. Video: [DEMO] Enable Amazon Security Lake
    13. Video: [DEMO] Querying Security Lake data with Athena
    14. Video: Amazon OpenSearch
    15. Video: Amazon Managed Grafana
    16. Reading: [Quiz] Security Log Analysis and Visualization
  14. 14 Infrastructure, Network, and Edge Security
    1. Video: About Amazon CloudFront
    2. Video: CloudFront Origin Access Control (OAC)
    3. Video: CloudFront and Geo Restrictions
    4. Video: CloudFront Headers
    5. Video: CloudFront Logging
    6. Video: CloudFront Signed URL and Cookies
    7. Video: CloudFront Field-Level Encryption
    8. Video: AWS WAF and Rate Limiting
    9. Video: About the AWS WAF
    10. Video: AWS Shield Advanced
    11. Video: API Gateway Security
    12. Lab: [LAB] API Gateway Lambda Authorizer Bypass
  15. 15 Design and implement an incident response plan
    1. Video: Incident response planning basics for AWS
    2. Video: Automating Incident Response in AWS
    3. Video: Playbooks and runbooks
    4. Reading: [Cheat Sheet] The 6 phases of IR mapped to AWS services
    5. Reading: [Checklist] AWS Incident Response Planning Checklist
    6. Reading: [Quiz] Incident response planning
    7. Video: Incident containment in AWS
    8. Reading: [Quiz] Choosing the Right EC2 Containment Layer
    9. Video: Test and validate your Incident Response plans
  16. 16 Detect security threats and anomalies
    1. Video: About IAM Access Analyzer
    2. Video: IAM Access Analyzer Unused Access
    3. Reading: [LAB] Check policies for new access before deployment with IAM Access Analyzer
    4. Reading: [LAB] Check IAM policies against a deny list with IAM Access Analyzer
    5. Video: Deploying Access Analyzer Multi-Account
    6. Reading: [Quiz] IAM Access Analyzer
    7. Video: [Scenario] Alert and monitoring for all root activities
    8. Reading: [LAB] Security Observability with CloudWatch Dashboards
  17. 17 Respond to compromised resources and workloads
    1. Reading: [LAB] Automated security response with EventBridge and Lambda
    2. Video: Incident management with SSM OpsCenter and Explorer
    3. Video: Using Step Functions for Automated Security Workflows
    4. Video: Automatically remediating incidents
    5. Video: Using SageMaker AI Notebooks for Incident Response
    6. Reading: [Quiz] Automatically remediate incidents
  18. 18 Practice Exams
    1. Reading: Where can I find the practice exams?
    2. Video: Live Practice Exams Study Group Session 1
    3. Video: Live Practice Exams Study Group Session 2
  19. 19 Conclusion
    1. Reading: What to do once you pass the exam

Section 11 · Securely deploying and accessing compute resources

Code Signing with AWS Signer

Christophe Limpalair

Christophe Limpalair

Free

Sign in to open this lesson

This course is free with a Cybr account. Create one to open the lesson and keep your place as you go.

Create Free Account Already a member? Sign in
  • Video lessons with full transcripts
  • Hands-on labs in real cloud accounts
  • Practice exams with explanations
PreviousAmazon VPC Network Access Analyzer
Next Centralized CloudWatch Logging