Topic · 5 articles
Security
Hardening servers: firewalls, SSH and permissions.
-
Encryption, Secrets and Threat Protection
How KMS protects your keys, where to keep passwords with Parameter Store and Secrets Manager, free certificates from ACM, stopping attacks with WAF and Shield, and detecting threats with GuardDuty, Inspector and Macie, with a hands-on.
-
Advanced Identity: Organizations and Identity Center
Managing many accounts with Organizations and SCPs, conditions in IAM policies, roles versus resource policies, permissions boundaries and how AWS makes a decision, single sign-on with Identity Center, and a hands-on simulating policies.
-
S3: Security and Encryption
How to encrypt your data in S3 and who holds the keys, enforcing HTTPS, sharing a private file with a signed link, understanding CORS, and protecting data from deletion with MFA Delete and Object Lock, with a hands-on.
-
IAM: Who Can Do What in Your AWS Account
How to manage identities and permissions with users, groups, policies and roles, stop using the root user, and apply least privilege.
-
Setting Up a Secure Linux Server from Scratch
A comprehensive step-by-step guide to setting up a secure Linux server, from basic installation to securing the server against breaches.