Security Engineering on AWS

Day 3

Resources

The following resource links will provide more information and help reinforce topics covered during Day 1:

Module 11: Security Considerations: Serverless Environments

• Common Amazon Cognito Scenarios
• Using Adaptive Authentication
• Controlling access to an API with API Gateway resource policies
• API Gateway resource policy examples
• Using AWS Lambda environment variables
• Using resource-based policies for AWS Lambda
• Using AWS Lambda with Amazon API Gateway
• Monitoring and troubleshooting Lambda applications
• Working with AWS Lambda function metrics
• Accessing Amazon CloudWatch logs for AWS Lambda

Module 12: Threat Detection and Investigation

• Remediating security issues discovered by GuardDuty
• AWS Security Finding Format (ASFF)
• Overview of the behavior graph data structure
• Source data used in a behavior graph

Module 13: Secrets Management on AWS

• How AWS services use AWS KMS
• AWS CloudHSM Clusters
• Using a custom key store
• Are KMS custom key stores right for you?
• How to securely provide database credentials to Lambda functions by using AWS Secrets Manager
• Key terms and concepts for AWS Secrets Manager
• Managing parameter tiers

Module 14: Automation and Security by Design

• Security by Design
• Working with AWS CloudFormation StackSets
• Prevent updates to stack resources
• How to Automate Cloud Governance to Achieve Safety at Speed

Module 15: Account Management and Provisioning on AWS

• How to use service control policies to set permission guardrails across accounts in your AWS Organization
• Policy evaluation logic
• Session policies
• AWS Control Tower
• AWS Control Tower Guardrail Reference
• How AWS Control Tower Works
• Enabling self-service provisioning of AWS resources with AWS Control Tower
• AWS Landing Zone
• Enabling SAML for your AWS resources
• AWS Signle Sign-On Getting Started
• AWS service-linked role
• What Is AWS Directory Service?
• Introducing AWS Single Sign-On