• Labs
    • Learning Paths
    • CybrBits
    • All Courses
    • Join Discord
    • Contact & Support
    • Blog
    • Cheat Sheets
    • Ebooks
    • Podcasts
    • Webinars
  • Pricing
    • Training
    • Hosted Labs
    • Consulting
Sign in Sign up
Introduction to AWS Security

9 sections · 101 lessons

  • Video
  • Lab
  • Cheat sheet
  • Reading
  • Premium
  1. 1 Introduction
    1. Video: About the course and authors Preview
    2. Video: AWS cloud architecture Preview
    3. Video: Security concerns with our architecture Preview
    4. Video: Regions and Availability Zones (AZs) Preview
    5. Video: Shared responsibility in the cloud Preview
    6. Cheat sheet: [Cheat Sheet] AWS Security Services Preview
    7. Reading: Create a billing alert to avoid surprise bills Preview
  2. 2 Infrastructure Security
    1. Video: VPC networks Preview
    2. Video: Default VPCs Preview
    3. Video: [DEMO] Creating VPCs and Subnets Preview
    4. Video: How many VPCs should you use? Premium
    5. Video: [DEMO] Subnet, Route Table, and Gateway Configurations Premium
    6. Lab: [LAB] [Challenge] Create a VPC with public and private subnets Preview
    7. Lab: [LAB] Launching an EC2 instance Premium
    8. Video: [DEMO] Security Groups (SGs) Premium
    9. Video: Security Groups Best Practices Premium
    10. Video: [DEMO] Network Access Control Lists (NACLs) Premium
    11. Cheat sheet: [Cheat Sheet] SGs vs. NACLs Preview
    12. Lab: [LAB] [Challenge] Configure security groups and NACLs to specific requirements Premium
    13. Video: Elastic Load Balancers Premium
    14. Video: [DEMO] AWS WAF Premium
    15. Lab: [LAB] [Challenge] Deploy AWS WAF ACL for Application Load Balancer Premium
    16. Video: [DEMO] AWS Network Firewall - Part 1 Premium
    17. Video: [DEMO] AWS Network Firewall - Part 2 Premium
    18. Video: AWS Shield for DDoS Protection Premium
    19. Lab: [LAB] Reduce AWS attack surface with port scanning and Security Groups Premium
    20. Video: AWS Firewall Manager Premium
  3. 3 Identity and Access Management (IAM)
    1. Video: Key Concepts of IAM in AWS Premium
    2. Video: [DEMO] Getting started with IAM in AWS Premium
    3. Video: [DEMO] Creating our first admin user Premium
    4. Video: Assigning permissions with policies Premium
    5. Cheat sheet: [Cheat Sheet] Anatomy of an AWS IAM Policy Preview
    6. Video: [DEMO] Using Identity Center AWS SSO Premium
    7. Video: IAM Roles Premium
    8. Video: [DEMO] Creating a role for EC2 instances to access S3 buckets Premium
    9. Video: End-User Management with Amazon Cognito Premium
    10. Video: IAM Access Analyzer Premium
    11. Video: [DEMO] IAM Access Analyzer Unused Access Premium
    12. Lab: [LAB] Check policies for new access before deployment with IAM Access Analyzer Premium
    13. Lab: [LAB] Check IAM policies against a deny list with IAM Access Analyzer Premium
    14. Lab: [LAB] IAM Credentials Report Premium
  4. 4 Data Protection
    1. Video: Data protection in the cloud Premium
    2. Video: EBS Data Protection and Encryption Premium
    3. Lab: [LAB] Encrypt Existing Unencrypted EBS Volumes and Snapshots Premium
    4. Video: Amazon RDS Data Protection and Encryption Premium
    5. Video: Key Management with AWS KMS Premium
    6. Cheat sheet: [Cheat Sheet] Getting Started with AWS KMS Premium
    7. Video: [DEMO] Creating a Symmetric Encryption KMS Key Premium
    8. Cheat sheet: [Cheat Sheet] Encrypt and Decrypt Data with KMS and Data Keys Premium
    9. Lab: [LAB] Encrypt and Decrypt Data with KMS and Data Keys Premium
  5. 5 Amazon S3 Bucket Protection
    1. Video: Understanding Bucket Ownership Premium
    2. Lab: [LAB] Creating Buckets and Uploading Objects in S3 Premium
    3. Video: Managing Access to Buckets Premium
    4. Cheat sheet: [Cheat Sheet] S3 Bucket Policies vs. ACLs vs. IAM Policies Preview
    5. Lab: [LAB] [Challenge] Create an IAM role for secure access to S3 based on a scenario Premium
    6. Video: Using Signed URLs Premium
    7. Lab: [LAB] S3 Presigned URLs Premium
    8. Video: Encrypting S3 Data Premium
    9. Video: [DEMO] Enable S3 Object Versioning Premium
    10. Cheat sheet: [Cheat Sheet] Amazon S3 Protection Summary Premium
    11. Cheat sheet: [Cheat Sheet] Create a least privilege S3 bucket policy Premium
    12. Video: AWS Log Types and Auditing Options Premium
  6. 6 Logging, Monitoring, and Incident Response
    1. Video: [DEMO] Enable S3 Server Access Logs Premium
    2. Video: AWS CloudTrail Premium
    3. Video: Amazon CloudWatch Premium
    4. Video: [DEMO] CloudTrail Security Automation with CloudWatch Logs and SNS Premium
    5. Video: [LAB] Amazon VPC Flow Logs Premium
    6. Reading: Proper Logging and Monitoring Premium
    7. Video: Amazon GuardDuty Premium
    8. Lab: [LAB] [DEMO] Enable Threat Detection with GuardDuty Premium
    9. Video: [DEMO] Amazon EventBridge Premium
    10. Video: AWS Config Premium
    11. Video: AWS Systems Manager Premium
    12. Lab: [LAB] Secure EC2 Access with SSM Session Manager and KMS Premium
    13. Video: [DEMO] AWS Config Automated Remediation with SSM Premium
    14. Lab: [LAB] Automated S3 Remediation to Enforce Block Public Access Premium
    15. Lab: [LAB] Remediate Open SSH Security Groups with AWS Config and SSM Premium
    16. Video: Amazon Detective Premium
    17. Video: [DEMO] Amazon Inspector Premium
    18. Lab: [LAB] Find vulnerable Lambda Functions with Amazon Inspector Premium
    19. Video: About Amazon Macie Premium
    20. Video: [DEMO] Deploying Amazon Macie Premium
    21. Video: [DEMO] AWS Security Hub CSPM Premium
    22. Video: [DEMO] Must-have AWS monitoring and alerting with SSK Premium
    23. Video: [DEMO] AWS Organizations Premium
  7. 7 Multi-Account Security
    1. Video: [DEMO] Centrally managing root access Premium
    2. Video: [DEMO] AWS SCPs and Management Policies Premium
    3. Video: [DEMO] Resource Control Policies (RCPs) Premium
    4. Video: AWS Control Tower Premium
    5. Video: [DEMO] Using RAM to share resources across accounts Premium
    6. Reading: About IaC Premium
  8. 8 Infrastructure as Code (IaC)
    1. Video: [DEMO] Deploying resources with CloudFormation Premium
    2. Video: [DEMO] Deploying a Lambda function with CloudFormation Premium
    3. Video: [DEMO] Multi-account and multi-region deployments Premium
    4. Video: [DEMO] Detecting drift Premium
    5. Lab: [LAB] CloudFormation Guard Premium
    6. Video: [DEMO] Using AWS Service Catalog - Part 1 Premium
    7. Video: [DEMO] Using AWS Service Catalog - Part 2 Premium
    8. Video: [DEMO] Getting started with the Cloud Development Kit (CDK) Premium
    9. Video: [DEMO] Deploying a project with the CDK Premium
  9. 9 Wrap-up and Key Takeaways
    1. Reading: What next? Premium

Section 4 · Data Protection

[DEMO] Creating a Symmetric Encryption KMS Key

Christophe Limpalair

Christophe Limpalair

Premium

This lesson is part of a Premium course

Join Premium to open it, along with every course, practice exam and hands-on lab on Cybr.

View Plans Already a member? Sign in
  • Video lessons with full transcripts
  • Hands-on labs in real cloud accounts
  • Practice exams with explanations
Previous[Cheat Sheet] Getting Started with AWS KMS
Next [Cheat Sheet] Encrypt and Decrypt Data with KMS and Data Keys