Preface

The second edition of AWS Security Cookbook discusses practical solutions to the most common problems faced by security consultants while securing their infrastructure. This book explores various AWS services and features that help implement security models and concepts such as the Confidentiality, Integrity, and Availability (CIA) triad, the Authentication, Authorization, and Accounting (AAA) triad, and non-repudiation. The book begins by getting you familiar with essential AWS security features such as Identity and Access Management (IAM), account aliases, and billing alerts, then delves deeper into access management, key management, data security, network security, web security, monitoring, compliance, advanced identity management, and additional security services and practices. Throughout the book, you will come across AWS Security services such as IAM, AWS Organizations, IAM Identity Center, Key Management Service (KMS), CloudHSM, S3, Virtual Private Cloud (VPC), CloudWatch, CloudTrail, Config, GuardDuty, Macie, Inspector, Security Hub, Cognito, Resource Access Manager, Systems Manager Parameter Store, Secrets Manager, Trusted Advisor, and AWS Artifact. Each chapter focuses on essential security areas and progresses toward cloud security best practices and integrating additional security services. By the end of this book, you will be adept with all of the techniques pertaining to securing AWS deployments along with having help to prepare for the AWS Certified Security – Specialty certification.