Module 1: Security on AWS

• Security in the AWS cloud
• AWS Shared Responsibility Model
• Incident response overview
• DevOps with Security Engineering

Module 2: Identifying Entry Points on AWS

• Identify the different ways to access the AWS platform
• Understanding IAM policies
• IAM Permissions Boundary
• IAM Access Analyzer
• Multi-factor authentication
• AWS CloudTrail
• Lab 01: Cross-account access

Module 3: Security Considerations: Web Application Environments

• Threats in a three-tier architecture
• Common threats: user access
• Common threats: data access
• AWS Trusted Advisor

Module 4: Application Security

• Amazon Machine Images
• Amazon Inspector
• AWS Systems Manager
• Lab 02: Using AWS Systems Manager and Amazon Inspector

Module 5: Data Security

• Data protection strategies
• Encryption on AWS
• Protecting data at rest with Amazon S3, Amazon RDS, Amazon DynamoDB 
• Protecting archived data with Amazon S3 Glacier
• Amazon S3 Access Analyzer
• Amazon S3 Access Points

Module 6: Securing Network Communications

• Amazon VPC security considerations
• Amazon VPC Traffic Mirroring
• Responding to compromised instances
• Elastic Load Balancing
• AWS Certificate Manager

Module 7: Monitoring and Collecting Logs on AWS

• Amazon CloudWatch and CloudWatch Logs
• AWS Config
• Amazon Macie
• Amazon VPC Flow Logs
• Amazon S3 Server Access Logs
• ELB Access Logs
• Lab 03: Monitor and Respond with AWS Config

Module 8: Processing Logs on AWS

• Amazon Kinesis 
• Amazon Athena 
• ab 04: Web Server Log Analysis

Module 9: Security Considerations: Hybrid Environments

• AWS Site-to-Site and Client VPN connections
• AWS Direct Connect
• AWS Transit Gateway

Module 10: Out-Of-Region Protection 

• Amazon Route 53
• AWS WAF
• Amazon CloudFront
• AWS Shield
• AWS Firewall Manager
• DDoS mitigation on AWS