Book Image

Mastering AWS Security

By : Albert Anthony
Book Image

Mastering AWS Security

By: Albert Anthony

Overview of this book

Mastering AWS Security starts with a deep dive into the fundamentals of the shared security responsibility model. This book tells you how you can enable continuous security, continuous auditing, and continuous compliance by automating your security in AWS with the tools, services, and features it provides. Moving on, you will learn about access control in AWS for all resources. You will also learn about the security of your network, servers, data and applications in the AWS cloud using native AWS security services. By the end of this book, you will understand the complete AWS Security landscape, covering all aspects of end - to -end software and hardware security along with logging, auditing, and compliance of your entire IT environment in the AWS cloud. Lastly, the book will wrap up with AWS best practices for security.

Related Content you might be interested in

Current Title:

Small book image
Mastering AWS Security
Albert Anthony
Oct, 2017 | 252 pages
Small book image
AWS Certified Security – Specialty Exam Guide
Stuart Scott
Sep, 2020 | 558 pages
Small book image
Practical AWS Networking
Mitesh Soni
Jan, 2018 | 258 pages
Small book image
AWS Certified Cloud Practitioner Exam Guide
Rajesh Daswani
Jan, 2022 | 630 pages
Table of Contents (10 chapters)
Preface
Preface
What this book covers
What you need for this book
Who this book is for
Conventions
Readers feedback
Customer support
Free Chapter
1
Overview of Security in AWS
Overview of Security in AWS
Chapter overview
AWS shared security responsibility model
AWS Security responsibilities
Customer security responsibilities
AWS account security features
AWS Security services
AWS Security resources
Summary
2
AWS Identity and Access Management
AWS Identity and Access Management
Chapter overview
IAM features and tools
IAM Authentication
IAM Authorization
Passwords Policy
AWS credentials
IAM limitations
IAM best practices
Summary
3
AWS Virtual Private Cloud
AWS Virtual Private Cloud
Chapter overview
VPC components
VPC features and benefits
VPC use cases
VPC security
Creating VPC
VPC limits
VPC best practices
Summary
4
Data Security in AWS
Data Security in AWS
Chapter overview
Encryption and decryption fundamentals
Securing data at rest
Securing data in transit
AWS KMS
AWS CloudHSM
Amazon Macie
Summary
5
Securing Servers in AWS
Securing Servers in AWS
EC2 Security best practices
EC2 Security
Amazon Inspector
AWS Shield
Summary
6
Securing Applications in AWS
Securing Applications in AWS
AWS Web Application Firewall (WAF)
Signing AWS API requests
Amazon Cognito
Amazon API Gateway
Summary
7
Monitoring in AWS
Monitoring in AWS
AWS CloudWatch
Monitoring Amazon EC2
Summary
8
Logging and Auditing in AWS
Logging and Auditing in AWS
Logging in AWS
AWS CloudWatch Logs
AWS CloudTrail
Auditing in AWS
AWS Artifact
AWS Config
AWS Trusted Advisor
AWS Service Catalog
AWS Security Audit Checklist
Summary
9
AWS Security Best Practices
AWS Security Best Practices
Shared security responsibility model
IAM security best practices
VPC
Data security
Security of servers
Application security
Monitoring, logging, and auditing
AWS CAF
Summary

Chapter overview

In this chapter, we will learn about protecting data in the AWS platform for various AWS services. To begin with, we will go over the fundamentals of encryption and decryption and how encryption and decryption of data work in AWS. Post that, we will start with security features for securing data in transit and at rest for each of the following AWS services:

  • Amazon Simple Storage Service (S3)
  • Amazon Elastic Block Storage (EBS)
  • Amazon Relational Database Service (RDS)
  • Amazon Glacier
  • Amazon DynamoDB
  • Amazon Elastic Map Reduce (EMR)

We will look at data encryption in AWS and we will learn about three models that are available for managing keys for encryption and how we can use these models for encrypting data in various AWS services such as, AWS S3, Amazon EBS, AWS Storage Gateway, Amazon RDS, and so on.

Next, we will deep dive on AWS KMS and go through KMS features...

Previous Section
End of Section 2
Next Section