AWS Certified Security Specialty Certification هذه الدورة تدرس باللغة الإنجليزية

تفاصيل الدورة

The AWS Certified Security – Specialty certification gives AWS architects not only essential know-how, but also a strong foundation on which to build security into AWS architectures at every level. This course will teach you to apply security at all AWS layers, including encrypting and protecting data at rest and in transit and how to prepare for (and respond to) security events.

In this course, you'll learn how to secure your data and your AWS services/resources at multiple levels using a defense-in-depth approach. You'll learn how to protect your AWS credentials and resources using Identity and Access Management. You'll capture and analyze logs using CloudTrail, CloudWatch, and Athena. Finally, you'll learn how to implement network and instance security, encrypt data at rest and in transit and set up data backup, replication, and recovery.

By the end of this course, you'll be ready to control access to your AWS resources granularly. You will develop the skills to ace the exam for the Security Solutions certification.

Course Table of Content

Course Introduction (5)

• The Course Overview
• Certification Benefits Recap
• Understanding the Shared Responsibility Model
• Birds-Eye View of AWS Security
• Setting up Your AWS Environment

Understanding Infrastructure Security - Part One (4)

• Using Key Pairs with EC2 Instances
• Understanding Hypervisors and Isolation in EC2 Instances
• Get to Know AWS Secrets Manager
• Leveraging AWS Systems Manager, Parameter Store, and Run Command Features

Understanding Infrastructure Security - Part Two (3)

• What Is a VPC?
• Enabling Safe Internet Connectivity in VPCs
• AWS Marketplace Security Products

Leverage AWS Services for Logging and Monitoring - Part One (3)

• Enabling Centralized Logging with CloudWatch
• Leverage CloudTrail to Track User Activity and API Usage
• Using Athena to Query Your Logs

Leveraging AWS Services for Logging and Monitoring - Part Two (3)

• Automated Security Assessments Using AWS Inspector
• Intelligent Threat Detection Using AWS GuardDuty
• Benefits of Using Trusted Advisor

Deep Dive into AWS Identity and Access Management - Part One (3)

• Overview of AWS IAM for User and Group Management
• Deep Dive Into AWS IAM Roles and Policies
• Using AWS Organizations and Service Control Policies

Deep Dive into AWS Identity and Access Management - Part Two (2)

• Enabling Active Directory Federation Within AWS
• Understanding Cognito and Web Identity Federation

Ensuring Data Protection - Part One (4)

• Using AWS KMS to Easily Manage Data Encryption
• Hands-On KMS
• Restrict Access to S3 Buckets Using Policies and Pre-Signed URLs
• Enabling Vault Lock in AWS Glacier

Ensuring Data Protection - Part Two (3)

• Force S3 to Use CloudFront
• Getting to Know AWS Certificate Manager
• Security Considerations and Features of AWS Load Balancers

Managing Incident Response (4)

• Overview of a DDoS Attack
• Enabling AWS WAF and Shield to Protect Against DDoS Attacks
• Configuring Throttling and Caching in API Gateway
• Managing Compliance Requirements in AWS Using Artifact and Macie

Final Preparation (3)

• Booking Your Exam Seat
• Exploring Relevant Whitepapers
• Uncovering Additional Tips

تحديث بتاريخ 05 September, 2020