Managing AWS Security and Identity
Security is one of the number-one issues for those considering moving workloads to the cloud. This course shows how to use AWS IAM services to tighten security and lock down resources.
What you'll learn
Follow along and go through the best practices of AWS account security from two different vantage points. In this course, Managing AWS Security and Identity, you'll learn how to configure Amazon's Identity and Access Management feature, commonly known as IAM. First, you'll discover IAM user and group security best practices and IAM policies. Next, you'll explore when and how to use IAM roles and how to account audit. Finally, you'll learn about federating multiple AWS accounts and federating AWS IAM accounts with an external identity provider, such as active directory. By the end of this course, you'll be able to properly secure your AWS accounts using policies, two-factor authentication and even permit other AWS accounts access to the resources in your account.
Table of contents
- Introduction 1m
- Understanding AWS Shared Responsibilities 7m
- What Is the AWS Root User Account? 3m
- The Misfortune of a Compromised Root User Account 4m
- The Disadvantages of Sharing the Root User Account 4m
- How IAM Interacts with Other AWS Resources 3m
- Scenario: Introduction 1m
- Scenario: Wired Brain Coffee 6m
- Scenario: Globomantics 8m
- Demo: Getting Started with an AWS Free Account 5m
- Demo: Creating a New AWS Account 5m
- Demo: Navigating the AWS Web Console 4m
- Demo: Introducing IAM in the AWS Web Console 4m
- Conclusion 1m
- Introduction 1m
- IAM Users Overview 5m
- IAM Users 7m
- Demo: Creating IAM Users 4m
- Password Policies 4m
- Configuring the IAM Password Policy 3m
- Access Keys 5m
- Creating Access Keys 6m
- Demo: Creating and Using Access Keys 5m
- Multi-factor Authentication 10m
- Demo: Enabling Multi-factor Authentication 9m
- Permissions 3m
- Demo: Assigning Permissions 2m
- Conclusion 3m
- Introduction 1m
- IAM Policies 6m
- IAM Policy Structure 6m
- Creating a New Policy 4m
- AWS Managed Policies 6m
- In-line Policies 9m
- Policy Versioning 4m
- Demo: Introducing Policies 6m
- Demo: Creating a Policy 3m
- Demo: Troubleshooting Policies 2m
- Demo: Policy Versions 1m
- Demo: In-line Policies 3m
- Policy Simulator 8m
- Demo: Policy Simulator 5m
- Conclusion 2m
- Introduction 1m
- Multiple AWS Accounts 5m
- Cross-account Access 6m
- Backup and Disaster Recovery 6m
- Demo: Preparing the Backup AWS Account 6m
- Demo: Setting up the Role 5m
- Demo: How to Assume a Role 3m
- Demo: Assuming a Role in the CLI 4m
- Consolidated Billing 4m
- Demo: Setting up Consolidated Billing 4m
- Centralized Logging 4m
- Demo: Setting up Centralized Logging 6m
- Conclusion 2m
About the authors
Brian's technical background includes almost 20 years of implementing, teaching, and writing about products from VMware, Microsoft, Citrix, IBM, HP, EMC, Dell, and Cisco. In addition to his other certifications, he holds VMware's advanced instructor credential (VCI-Level 2) and two of their most advanced design and implementation credentials: VCAP-DCD and VCAP-DCA. Brian has recently begun taking his classroom and field experience to the masses by authoring a number of publications, training cou... more
John Hales is also the author of many books, from involved technical books from Sybex and Cengage to exam preparation books, to many quick reference guides from BarCharts, in addition to custom courseware for Fortune 500 customers. His latest book on vSphere is entitled Administering vSphere 5: Planning, Implementing and Troubleshooting. He has taught in many countries in Europe (including Russia, The Netherlands, Germany, Latvia, England, France, and Ireland), the Middle East (including Israel ... more