Book Image

Mastering AWS Security

By : Albert Anthony
Book Image

Mastering AWS Security

By: Albert Anthony

Overview of this book

Mastering AWS Security starts with a deep dive into the fundamentals of the shared security responsibility model. This book tells you how you can enable continuous security, continuous auditing, and continuous compliance by automating your security in AWS with the tools, services, and features it provides. Moving on, you will learn about access control in AWS for all resources. You will also learn about the security of your network, servers, data and applications in the AWS cloud using native AWS security services. By the end of this book, you will understand the complete AWS Security landscape, covering all aspects of end - to -end software and hardware security along with logging, auditing, and compliance of your entire IT environment in the AWS cloud. Lastly, the book will wrap up with AWS best practices for security.

Related Content you might be interested in

Current Title:

Small book image
Mastering AWS Security
Albert Anthony
Oct, 2017 | 252 pages
Small book image
AWS Certified Security – Specialty Exam Guide
Stuart Scott
Sep, 2020 | 558 pages
Small book image
Practical AWS Networking
Mitesh Soni
Jan, 2018 | 258 pages
Small book image
AWS Certified Cloud Practitioner Exam Guide
Rajesh Daswani
Jan, 2022 | 630 pages
Table of Contents (10 chapters)
Preface
Preface
What this book covers
What you need for this book
Who this book is for
Conventions
Readers feedback
Customer support
Free Chapter
1
Overview of Security in AWS
Overview of Security in AWS
Chapter overview
AWS shared security responsibility model
AWS Security responsibilities
Customer security responsibilities
AWS account security features
AWS Security services
AWS Security resources
Summary
2
AWS Identity and Access Management
AWS Identity and Access Management
Chapter overview
IAM features and tools
IAM Authentication
IAM Authorization
Passwords Policy
AWS credentials
IAM limitations
IAM best practices
Summary
3
AWS Virtual Private Cloud
AWS Virtual Private Cloud
Chapter overview
VPC components
VPC features and benefits
VPC use cases
VPC security
Creating VPC
VPC limits
VPC best practices
Summary
4
Data Security in AWS
Data Security in AWS
Chapter overview
Encryption and decryption fundamentals
Securing data at rest
Securing data in transit
AWS KMS
AWS CloudHSM
Amazon Macie
Summary
5
Securing Servers in AWS
Securing Servers in AWS
EC2 Security best practices
EC2 Security
Amazon Inspector
AWS Shield
Summary
6
Securing Applications in AWS
Securing Applications in AWS
AWS Web Application Firewall (WAF)
Signing AWS API requests
Amazon Cognito
Amazon API Gateway
Summary
7
Monitoring in AWS
Monitoring in AWS
AWS CloudWatch
Monitoring Amazon EC2
Summary
8
Logging and Auditing in AWS
Logging and Auditing in AWS
Logging in AWS
AWS CloudWatch Logs
AWS CloudTrail
Auditing in AWS
AWS Artifact
AWS Config
AWS Trusted Advisor
AWS Service Catalog
AWS Security Audit Checklist
Summary
9
AWS Security Best Practices
AWS Security Best Practices
Shared security responsibility model
IAM security best practices
VPC
Data security
Security of servers
Application security
Monitoring, logging, and auditing
AWS CAF
Summary

Data Security in AWS

Data security in the AWS platform can be classified into two broad categories:

  • Protecting data at rest
  • Protecting data in transit

Furthermore, data security has the following components that help in securing data in multiple ways:

  • Data encryption
  • Key Management Services (KMS)
  • Access control
  • AWS service security features

AWS provides you with various tools and services to secure your data in AWS when your data is in transit or when your data is at rest. These tools and services include resource access control using AWS Identity and Access Management (IAM), data encryption, and managed KMS, such as AWS KMS for creating and controlling keys used for data encryption. The AWS KMS provides multiple options for managing your entire Key Management Infrastructure (KMI). Alternatively, you also have the option to go with the fully managed AWS CloudHSM service, a...

Previous Section
End of Section 1
Next Section