Course Introduction
How IAM is used to securely manage access
Managing user identities with long term credentials in IAM
Managing access using IAM user groups & roles
Using IAM policies to define and manage permissions
Cross-account access
Key Management Service (KMS)
AWS Web Application Firewall
AWS Firewall Manager
Using AWS Network Firewalls to Secure Your VPCs
AWS Shield
AWS Security Hub Overview
Other AWS Security Services
Amazon Cognito
Identity Federation
AWS SSO
CloudHSM
AWS Secrets Manager
The course is part of this learning path
This section of the AWS Certified Solutions Architect - Professional learning path introduces the key identity management, security, and encryption services within AWS relevant to the AWS Certified Solutions Architect - Professional exam. Core to security is AWS Identity & Access Management commonly referred to as IAM. This service manages identities and their permissions that can access your AWS resources, so understanding how this service works and what you can do with it will help you to maintain a secure AWS environment. IAM is an important service in ensuring your resources are secure.
Want more? Try a Lab Playground or do a Lab Challenge!
Learning Objectives
- Learn about identity and access management on AWS, including users, groups & roles, IAM policies, MFA, identity federation, and cross-account access
- Learn the fundamentals of AWS Web Application Firewall (WAF), including what it is, when to use it, how it works, and why use it
- Understand how to configure and monitor AWS WAF
- Learn about AWS Firewall Manager and its components
- Learn how to configure AWS Shield
- Learn the fundamentals of AWS Cognito
Hello, and welcome to this course on identity management, security, and encryption in AWS, where we’re here to help you on your journey to prepare for the AWS Certified Solutions Architect - Professional certification.
Before we get started, I’d like to introduce myself. My name is Danny Jessee, and I am one of the trainers here at Cloud Academy, specializing in AWS – Amazon Web Services – and AWS certifications.
In this course, the AWS team will be presenting a series of lectures that introduce the various identity management, security, and encryption services currently available in AWS that may be covered on the exam.
Feel free to contact me with any questions using the details shown on the screen, or you can always get in touch with us here at Cloud Academy by sending an email to support@cloudacademy.com, where one of our Cloud experts will reply to your question.
This course has been specifically curated to help you pass the AWS Certified Solutions Architect - Professional exam and is ideal for anyone who is looking to learn more about the various identity management, security, and encryption services in AWS in preparation for the exam.
The objective of this course is to provide an introduction to AWS identity management, security, and encryption services for solution architects, including:
-
AWS Identity and Access Management, and how it is used to securely manage access to resources,
-
Securing VPCs and web applications with services such as AWS Firewall Manager, WAF, and Shield,
-
AWS Security Hub and other security services such as Inspector, GuardDuty, and Macie,
-
Amazon Cognito and federated identity in AWS, and
-
Hardware security modules in the AWS Cloud using CloudHSM.
Together with the other courses in this learning path, we’ll cover all of the key tools, technologies, and concepts from the AWS Certified Solutions Architect - Professional exam guide and ensure that you are fully prepared to sit this exam.
The AWS Certified Solutions Architect - Professional certification has been designed for anyone who has experience in a solutions architect role. You should also have experience using AWS services to design and implement cloud solutions based on the AWS Well-Architected Framework. All of the AWS Cloud concepts introduced in this course will be explained and reinforced from the ground up.
Here at Cloud Academy, we strive to keep our content current to provide the best training available. If you have any feedback, positive or negative, or if you notice anything that needs to be updated or corrected for the next release cycle, please reach out to us at support@cloudacademy.com. Thank you!
Danny has over 20 years of IT experience as a software developer, cloud engineer, and technical trainer. After attending a conference on cloud computing in 2009, he knew he wanted to build his career around what was still a very new, emerging technology at the time — and share this transformational knowledge with others. He has spoken to IT professional audiences at local, regional, and national user groups and conferences. He has delivered in-person classroom and virtual training, interactive webinars, and authored video training courses covering many different technologies, including Amazon Web Services. He currently has six active AWS certifications, including certifications at the Professional and Specialty level.