- +65 8132 0344
- hello@cloudenabled.sg
- India, Singapore
Anil Bidari
Chief Consultant
Anil Bidari is a versatile trainer and consultant specializing in GitLab, AWS, Azure, Google, DevOps, Jenkins, Kubernetes, Ansible, Docker, Agile, and Machine Learning. His expertise drives successful technology adoption and implementation, benefiting organizations and individuals alike.
- Time Duration : 21 Hours - 3 Days
- Study Lecture : 20 Lectures
- Skill Level : Advance Course
- Certificate : Yes
- Training Delivery Mode : Online - Live Instructor Led training
OVERVIEW :
COURSE DESCRIPTION
COURSE SUMMARY
COURSE OBJECTIVE
COURSE DESCRIPTION
The AWS Training is a comprehensive program designed to provide participants with a thorough understanding of security best practices and techniques on the Amazon Web Services (AWS) platform. This training covers a wide range of topics, including identity and access management, network security, encryption, compliance, and incident response. Participants will learn how to secure AWS resources, monitor and detect security incidents, and implement effective security controls. Through hands-on labs and real-world scenarios, attendees will gain practical experience in securing and protecting their AWS environments. This training is ideal for IT professionals and security practitioners looking to enhance their knowledge of AWS security and ensure the confidentiality, integrity, and availability of their cloud-based applications and data.
COURSE SUMMARY
The AWS Training in Singapore is a comprehensive program designed to equip participants with the knowledge and skills required to implement robust security measures on the Amazon Web Services (AWS) platform. This training covers essential security concepts, best practices, and tools for protecting AWS resources, data, and applications. Participants will learn about identity and access management, network security, encryption, compliance, and incident response. Through hands-on labs and practical exercises, attendees will gain practical experience in implementing security controls, monitoring for security incidents, and responding to threats. By completing this training, participants will be well-prepared to enhance the security posture of their AWS environments and mitigate risks effectively.
COURSE OBJECTIVE
The objective of the AWS Security Training is to provide participants with a comprehensive understanding of AWS security practices and enable them to implement robust security measures for their AWS environments. The course aims to equip participants with the knowledge and skills to effectively secure AWS resources, protect data, and ensure compliance with industry standards. Participants will learn about identity and access management, network security, encryption, and incident response. Through hands-on labs and real-world scenarios, participants will gain practical experience in implementing security controls and monitoring for security incidents. By the end of the training, participants will be able to confidently design and implement secure AWS architectures, safeguarding their applications and data from potential threats.
Course Outline
Module 1 : AWS Big Picture – 10000 feet overview ( concepts)
- AWS Regions and Availability Zones
- AWS Compute service overview
- AWS Storage Options overview
- AWS Database services overview
- AWS network services overview
Module 2 : AWS- Virtual Private Cloud (VPC) – Concepts
- What is VPC? – A comprehensive introduction
- Understanding VPC configurations
- Internet gateway and NAT gateway
- Security group and NACL
- AWS direct connect and AWS VPN
Module 3 : AWS- Virtual Private Cloud (VPC) – Hands-on-Lab by students
- VPC with single public subnet
- VPC with public and private subnet
- VPC Peering with region and across region
- Access control List
- Configuring VPC Instances ( Hands on lab by students)
- Creating a VPC
- Subnets
- Internet Gateway
- Routing
- Configuring a NAT Gateway
- Creating security groups
- Launching instances in public and private subnets
- NAT vs Bastions
- VPC Flow Logs
- VPC clean up
Module 4 : AWS – IAM (Identity and Access Management) concepts and Handosn
- What is IAM? – A comprehensive introduction
- Getting started with IAMs
IAM user- groups ( Hands on lab by students)
- Creating a user and group
- Adding a user to the group
- Password policy setup for users
- Attaching policy to users
- Enabling dual /Multi factor authentication to the users
IAM roles ( Hands on lab by students)
- Creating a IAM role and assign s3 full access policy
- Launching a EC2 instance using a S3 full access role
- AWS CLI install and create s3 bucket using cli, upload file and delete bucket from s3
- Deleting a role
- S3 bucket level policy setup
Module 5 : AWS cloud watch - concepts and Handson lab by students
- AWS cloud watch overview
- Configure ec2 logging agent
- Cloudwatch Log-group
Module 6 : AWS security concepts
- AWS shared security responsibility model
- Shared security model for Infrastructure services
- Shared security model for container services
- Shared security model for abstracted services
- Protecting data at rest in ec2, ebs, s3, RDS, Glacier, DynamoDB,and EMR
- Securing Your VPC
- Security moniroting, alerting and audit trail
Module 7 :AWS security tools – hands on Labs
- Trusted advisor
- Cloud trail
- AWS config
- AWS App config
- AWS well architected Tool concepts
- Key Management services for EBS encryption
Module 8 : Penetration testing on AWS cloud – live demo by Trainer
- Penetration Testing of EC2 Instances using Kali Linux
- Elastic Block Stores pen testing.
- Deleted Data
- Reconnaissance - Identifying Vulnerable S3 Buckets
- Exploiting Permissive S3 Buckets
- Identity Access Management on AWS
- Security and Pentesting of AWS Lambda
- Pentesting and Securing AWS RDS
- Using Pacu for AWS Pentesting
Addon Topics on Security : ( hands-on-lab-by students)
- Athena overview and quick lab
- analyze data in Amazon S3 using standard SQL.
- Macie overview and lab
- Generate report of s3 services any unencrypted and publicly accessibly buckets
- GuardDuty
- Analyze events published on cloud trail or vpc flow logs
- SecurityHub overview and demo by trainer
- Network packet inspection concepts
- Cloud HSM concepts
- WAF concepts
- Case studies
- KMS -service : use for EBS volume encryption
- AWS Cognito service- overview and features
Addon Topics on Networking : ( concepts only introduction to services and usecase )
- BGP concepts
- CloudHub
- Network cost management and optimization
- Placement groups- Optimizing network performance
- Case studies
Read More : AWS Security Training in Singapore
Let's Enroll Our Course !!
Cloud Enabled Pvt Ltd is your trusted partner in advancing your skills. We offer comprehensive training in Cloud Computing, DevOps, and Machine Learning, designed to propel your career.
