Once you have activated AWS Shield, you must then determine which resources and services you would like to protect using the ARNs of the resources. If you are looking to protect an EC2 instance, then you should be aware that you must first associate an elastic IP address (EIP) with the instance. AWS Shield can then be associated with the EIP and will protect whatever resource that particular EIP is associated with.
AWS Certified Security – Specialty Exam Guide
By :
AWS Certified Security – Specialty Exam Guide
By:
Overview of this book
AWS Certified Security – Specialty is a certification exam to validate your expertise in advanced cloud security. With an ever-increasing demand for AWS security skills in the cloud market, this certification can help you advance in your career. This book helps you prepare for the exam and gain certification by guiding you through building complex security solutions.
From understanding the AWS shared responsibility model and identity and access management to implementing access management best practices, you'll gradually build on your skills. The book will also delve into securing instances and the principles of securing VPC infrastructure. Covering security threats, vulnerabilities, and attacks such as the DDoS attack, you'll discover how to mitigate these at different layers. You'll then cover compliance and learn how to use AWS to audit and govern infrastructure, as well as to focus on monitoring your environment by implementing logging mechanisms and tracking data. Later, you'll explore how to implement data encryption as you get hands-on with securing a live environment. Finally, you'll discover security best practices that will assist you in making critical decisions relating to cost, security,and deployment complexity.
By the end of this AWS security book, you'll have the skills to pass the exam and design secure AWS solutions.
Related Content you might be interested in
Current Title:
AWS Certified Security – Specialty Exam Guide
Table of Contents (27 chapters)
Preface
Section 1: The Exam and Preparation
Free Chapter
AWS Certified Security - Specialty Exam Coverage
Section 2: Security Responsibility and Access Management
AWS Shared Responsibility Model
Access Management
Working with Access Policies
Federated and Mobile Access
Section 3: Security - a Layered Approach
Securing EC2 Instances
Configuring Infrastructure Security
Implementing Application Security
DDoS Protection
Incident Response
Securing Connections to Your AWS Environment
Section 4: Monitoring, Logging, and Auditing
Implementing Logging Mechanisms
Auditing and Governance
Section 5: Best Practices and Automation
Automating Security Detection and Remediation
Discovering Security Best Practices
Section 6: Encryption and Data Security
Managing Key Infrastructure
Managing Data Security
Mock Tests
Assessments
Other Books You May Enjoy
Customer Reviews