Book Image

Mastering AWS Security

By : Albert Anthony
Book Image

Mastering AWS Security

By: Albert Anthony

Overview of this book

Mastering AWS Security starts with a deep dive into the fundamentals of the shared security responsibility model. This book tells you how you can enable continuous security, continuous auditing, and continuous compliance by automating your security in AWS with the tools, services, and features it provides. Moving on, you will learn about access control in AWS for all resources. You will also learn about the security of your network, servers, data and applications in the AWS cloud using native AWS security services. By the end of this book, you will understand the complete AWS Security landscape, covering all aspects of end - to -end software and hardware security along with logging, auditing, and compliance of your entire IT environment in the AWS cloud. Lastly, the book will wrap up with AWS best practices for security.

Related Content you might be interested in

Current Title:

Small book image
Mastering AWS Security
Albert Anthony
Oct, 2017 | 252 pages
Small book image
AWS Certified Security – Specialty Exam Guide
Stuart Scott
Sep, 2020 | 558 pages
Small book image
Practical AWS Networking
Mitesh Soni
Jan, 2018 | 258 pages
Small book image
AWS Certified Cloud Practitioner Exam Guide
Rajesh Daswani
Jan, 2022 | 630 pages
Table of Contents (10 chapters)
Preface
Preface
What this book covers
What you need for this book
Who this book is for
Conventions
Readers feedback
Customer support
Free Chapter
1
Overview of Security in AWS
Overview of Security in AWS
Chapter overview
AWS shared security responsibility model
AWS Security responsibilities
Customer security responsibilities
AWS account security features
AWS Security services
AWS Security resources
Summary
2
AWS Identity and Access Management
AWS Identity and Access Management
Chapter overview
IAM features and tools
IAM Authentication
IAM Authorization
Passwords Policy
AWS credentials
IAM limitations
IAM best practices
Summary
3
AWS Virtual Private Cloud
AWS Virtual Private Cloud
Chapter overview
VPC components
VPC features and benefits
VPC use cases
VPC security
Creating VPC
VPC limits
VPC best practices
Summary
4
Data Security in AWS
Data Security in AWS
Chapter overview
Encryption and decryption fundamentals
Securing data at rest
Securing data in transit
AWS KMS
AWS CloudHSM
Amazon Macie
Summary
5
Securing Servers in AWS
Securing Servers in AWS
EC2 Security best practices
EC2 Security
Amazon Inspector
AWS Shield
Summary
6
Securing Applications in AWS
Securing Applications in AWS
AWS Web Application Firewall (WAF)
Signing AWS API requests
Amazon Cognito
Amazon API Gateway
Summary
7
Monitoring in AWS
Monitoring in AWS
AWS CloudWatch
Monitoring Amazon EC2
Summary
8
Logging and Auditing in AWS
Logging and Auditing in AWS
Logging in AWS
AWS CloudWatch Logs
AWS CloudTrail
Auditing in AWS
AWS Artifact
AWS Config
AWS Trusted Advisor
AWS Service Catalog
AWS Security Audit Checklist
Summary
9
AWS Security Best Practices
AWS Security Best Practices
Shared security responsibility model
IAM security best practices
VPC
Data security
Security of servers
Application security
Monitoring, logging, and auditing
AWS CAF
Summary

AWS CloudWatch

AWS CloudWatch is a monitoring service that collects metrics and tracks them for your resources in AWS, including your applications, in real time. Alongside, you can also collect and monitor log files with AWS CloudWatch. You can set alarms for metrics in AWS CloudWatch to continuously monitor performance, utilization, health, and other parameters of all your AWS resources and take proactive action in the event of metrics crossing thresholds set by resource owners and system administrators. This is accessible through the AWS Management Console, command-line interface, API, and SDKs.

AWS CloudWatch is a global AWS service meaning it can monitor AWS resources and services across all AWS regions. For example, you can monitor EC2 instances available in multiple AWS regions through a single dashboard.

AWS CloudWatch monitors your resources and your applications without...

Previous Section
End of Section 2
Next Section