Book Overview & Buying
Table Of Contents
Feedback & Rating

Mastering AWS Security

By : Albert Anthony

3.7 (13)

Buy this Book

Mastering AWS Security

3.7 (13)

By: Albert Anthony

Buy this Book

Overview of this book

Mastering AWS Security starts with a deep dive into the fundamentals of the shared security responsibility model. This book tells you how you can enable continuous security, continuous auditing, and continuous compliance by automating your security in AWS with the tools, services, and features it provides. Moving on, you will learn about access control in AWS for all resources. You will also learn about the security of your network, servers, data and applications in the AWS cloud using native AWS security services. By the end of this book, you will understand the complete AWS Security landscape, covering all aspects of end - to -end software and hardware security along with logging, auditing, and compliance of your entire IT environment in the AWS cloud. Lastly, the book will wrap up with AWS best practices for security.

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Readers feedback

Customer support

Free Chapter

Overview of Security in AWS

Chapter overview

AWS shared security responsibility model

AWS Security responsibilities

Customer security responsibilities

AWS account security features

AWS Security services

AWS Security resources

Summary

AWS Identity and Access Management

Chapter overview

IAM features and tools

IAM Authentication

IAM Authorization

Passwords Policy

AWS credentials

IAM limitations

IAM best practices

Summary

AWS Virtual Private Cloud

Chapter overview

VPC components

VPC features and benefits

VPC use cases

VPC security

Creating VPC

VPC limits

VPC best practices

Summary

Data Security in AWS

Chapter overview

Encryption and decryption fundamentals

Securing data at rest

Securing data in transit

AWS KMS

AWS CloudHSM

Amazon Macie

Summary

Securing Servers in AWS

EC2 Security best practices

EC2 Security

Amazon Inspector

AWS Shield

Summary

Securing Applications in AWS

AWS Web Application Firewall (WAF)

Signing AWS API requests

Amazon Cognito

Amazon API Gateway

Summary

Monitoring in AWS

AWS CloudWatch

Monitoring Amazon EC2

Summary

Logging and Auditing in AWS

Logging in AWS

AWS CloudWatch Logs

AWS CloudTrail

Auditing in AWS

AWS Artifact

AWS Config

AWS Trusted Advisor

AWS Service Catalog

AWS Security Audit Checklist

Summary

AWS Security Best Practices

Shared security responsibility model

IAM security best practices

VPC

Data security

Security of servers

Application security

Monitoring, logging, and auditing

AWS CAF

Summary

Customer Reviews

3.7 (13)

5 star

53.8%

4 star

3 star

15.4%

2 star

23.1%

1 star

7.7%

Data Security in AWS

Data security in the AWS platform can be classified into two broad categories:

Protecting data at rest
Protecting data in transit

Furthermore, data security has the following components that help in securing data in multiple ways:

Data encryption
Key Management Services (KMS)
Access control
AWS service security features

AWS provides you with various tools and services to secure your data in AWS when your data is in transit or when your data is at rest. These tools and services include resource access control using AWS Identity and Access Management (IAM), data encryption, and managed KMS, such as AWS KMS for creating and controlling keys used for data encryption. The AWS KMS provides multiple options for managing your entire Key Management Infrastructure (KMI). Alternatively, you also have the option to go with the fully managed AWS CloudHSM service, a...