ANS-C01 Introduction
AWS Config
AWS CloudTrail
Amazon Inspector
AWS Logging Mechanisms
Advanced networking at scale
The course is part of this learning path
In this section of the AWS Certified Advanced Networking - Specialty learning path, we introduce you to the various network management services currently available in AWS that are relevant to the ANS-C01 exam.
Learning Objectives
- Identify and describe the various network management services available in AWS
- Understand the use of AWS Config to assess network infrastructure
- Describe how AWS CloudTrail is used to monitor and audit network infrastructure
- Explain how Amazon Inspector is used to enhance AWS network security and compliance
- Describe how VPC Flow Logs are used to capture IP traffic within the AWS Cloud
- Identify strategies for solving common issues that occur when running cloud networking at scale
Prerequisites
The AWS Certified Advanced Networking - Specialty certification has been designed for anyone with experience designing, implementing, and operating complex AWS and hybrid networking architectures. Ideally, you’ll also have some exposure to the nuances of AWS networking regarding the integration of AWS services and AWS security best practices. Many exam questions will require advanced level knowledge of many AWS services, including AWS networking services. The AWS Cloud concepts introduced in this course will be explained and reinforced from the ground up.
Resources & Links used in this Lecture
Amazon CloudWatch Course: https://cloudacademy.com/course/amazon-web-services-cloudwatch/introduction-39/
AWS CloudTrail Course: https://cloudacademy.com/course/aws-cloudtrail-introduction/aws-cloudtrail-an-introduction-1/
---------------------------------------------------------------------------------------------------------------------------------------------
Transcript:
Hello and welcome to this very short lecture where I want to show you how Amazon Inspector integrates with Amazon CloudWatch and AWS CloudTrail.
For more information on both of these services, please see our existing courses here on both services.
Being able to monitor and track the performance of a service and trace its actions from an audit perspective is invaluable. And Amazon Inspector integrates seamlessly with both CloudWatch and CloudTrail which performs these functions.
You can use Amazon CloudWatch to monitor and inspect agents against specific metrics for both assessment targets and assessment templates as shown. There is also an aggregate metric which will count the number of assessment runs within your account. These metrics allow you to monitor the performance and activity of Amazon Inspector, providing a greater insight into specific statistics.
From an AWS CloudTrail perspective, all API calls that are performed by Inspector are logged with CloudTrail. This allows you to understand by who, what, and when specific actions were carried out, which are all saved and recorded within the CloudTrail log files that are stored in S3.
These integration elements allow for additional auditing and monitoring to take place throughout your security assessments within your environment which is always an added benefit from a governance and security audit perspective. That now brings us to the end of this lecture.
Coming up next, I want to highlight the limitations of the Amazon Inspector service.
Stuart has been working within the IT industry for two decades covering a huge range of topic areas and technologies, from data center and network infrastructure design, to cloud architecture and implementation.
To date, Stuart has created 150+ courses relating to Cloud reaching over 180,000 students, mostly within the AWS category and with a heavy focus on security and compliance.
Stuart is a member of the AWS Community Builders Program for his contributions towards AWS.
He is AWS certified and accredited in addition to being a published author covering topics across the AWS landscape.
In January 2016 Stuart was awarded ‘Expert of the Year Award 2015’ from Experts Exchange for his knowledge share within cloud services to the community.
Stuart enjoys writing about cloud technologies and you will find many of his articles within our blog pages.