AWS Security Training Course: Protect identities, data and workloads on AWS

The AWS Security training course starts from an observation that most cloud incidents confirm: the flaw is almost never in AWS’s infrastructure, it is in the way that infrastructure was configured. An open bucket, an over-permissive role, a key left behind in a repository.

You work on security where it is actually decided: designing IAM policies and hunting down excessive permissions, encryption and key governance, protecting the network perimeter — but above all the ability to see. Logging, detection, and what you do in the twenty minutes that follow an alert. Incident response gets a module of its own, because an organisation that has never rehearsed its response plan does not have one.

Over 3 days, most of the work happens under real conditions: you harden, you attack your own configurations, you investigate. The programme follows the syllabus of the AWS Certified Security – Specialty (SCS-C02) certification.

Security is best worked alongside the whole pathway: our AWS Solutions Architect Training Course for secure design, our AWS SysOps Administrator Training Course for operations, and our AWS Essential Services Training Course for the services to harden. The container side belongs to our AWS EKS Training Course, data to our AWS Data Engineer Training Course, and cost governance to our AWS FinOps Training Course. To apply security from provisioning onward, see our Terraform Fundamentals Training Course.

Sessions are guaranteed from a single registrant (except in cases of force majeure). A preliminary discussion takes place between the participant and/or a company representative to fully take into account the participant’s profile. Assessment: quizzes, role-play and practical exercises. A certificate of completion is issued at the end of the training. This training prepares you for the AWS Certified Security – Specialty (SCS-C02) certification (exam not included). This training is part of our Cloud Computing Training Courses catalogue. Discover our other cloud training courses to master architectures, services and best practices on AWS, Azure and GCP. To get started on AWS, we recommend our AWS Cloud Practitioner Training Course as a prerequisite, which lays the foundations of the Amazon Cloud.

By the end of the training, participants will be able to:

• Design least-privilege IAM policies and detect excessive permissions.
• Implement encryption at rest and in transit, and govern the key lifecycle.
• Protect the network perimeter and exposed applications (WAF, Shield, VPC segmentation).
• Build centralised logging that stands up to investigation.
• Detect threats and non-compliant configurations using native AWS services.
• Conduct incident response on AWS: containment, evidence collection, eradication.
• Automate compliance controls and the remediation of drift.

Prior hands-on AWS practice is required: compute, storage, networking and IAM services should already be familiar to you. The level of the AWS Solutions Architect – Associate or SysOps Administrator – Associate certification is a suitable base.

Some grounding in information security (applied cryptography, network security, identity management) will make progress easier, without being a formal prerequisite.

Because every participant is unique, a personalised discussion with our expert allows us to design a training course perfectly aligned with their objectives.

• Security engineers and architects working on AWS environments.
• Cloud administrators responsible for hardening and compliance across their estate.
• DevOps engineers looking to embed security into their delivery pipeline.
• SOC analysts and incident response teams who need to investigate in the cloud.