Secure your Amazon Web Services (AWS) infrastructure with permission policies, key management, and network security, along with following cloud security best practices Key FeaturesExplore useful recipes for implementing robust cloud security solutions on AWSMonitor your AWS infrastructure and workloads using CloudWatch, CloudTrail, config, GuardDuty, and MaciePrepare for the AWS Certified Security-Specialty exam by exploring various security models and compliance offeringsBook Description As a security consultant, securing your infrastructure by implementing policies and following best practices is critical. This cookbook discusses practical solutions to the most common problems related to safeguarding infrastructure, covering services and features within AWS that can help you implement security models such as the CIA triad (confidentiality, integrity, and availability), and the AAA triad (authentication, authorization, and availability), along with non-repudiation. The book begins with IAM and S3 policies and later gets you up to speed with data security, application security, monitoring, and compliance. This includes everything from using firewalls and load balancers to secure endpoints, to leveraging Cognito for managing users and authentication. Over the course of this book, you'll learn to use AWS security services such as Config for monitoring, as well as maintain compliance with GuardDuty, Macie, and Inspector. Finally, the book covers cloud security best practices and demonstrates how you can integrate additional security services such as Glacier Vault Lock and Security Hub to further strengthen your infrastructure. By the end of this book, you'll be well versed in the techniques required for securing AWS deployments, along with having the knowledge to prepare for the AWS Certified Security – Specialty certification. What you will learnCreate and manage users, groups, roles, and policies across accountsUse AWS Managed Services for logging, monitoring, and auditingCheck compliance with AWS Managed Services that use machine learningProvide security and availability for EC2 instances and applicationsSecure data using symmetric and asymmetric encryptionManage user pools and identity pools with federated loginWho this book is for If you are an IT security professional, cloud security architect, or a cloud application developer working on security-related roles and are interested in using AWS infrastructure for secure application deployments, then this Amazon Web Services book is for you. You will also find this book useful if you’re looking to achieve AWS certification. Prior knowledge of AWS and cloud computing is required to get the most out of this book.

Secure your Amazon Web Services (AWS) infrastructure with permission policies, key management, and network security, while following cloud security best practices Key Features Explore useful recipes for implementing robust cloud security solutions on AWS Monitor your AWS infrastructure and workloads using CloudWatch, CloudTrail, Config, GuardDuty, and Macie Prepare for the AWS Certified Security - Specialty exam by exploring various security models and compliance offerings Purchase of the print or Kindle book includes a free PDF eBook Book DescriptionAs a security consultant, implementing policies and best practices to secure your infrastructure is critical. This cookbook discusses practical solutions for safeguarding infrastructure, covering services and features within AWS that help implement security models, such as the CIA triad (confidentiality, integrity, and availability) and the AAA triad (authentication, authorization, and accounting), as well as non-repudiation. This updated second edition starts with the fundamentals of AWS accounts and organizations. The book then guides you through identity and access management, data protection, network security, and encryption. You’ll explore critical topics such as securing EC2 instances, managing keys with KMS and CloudHSM, and implementing endpoint security. Additionally, you’ll learn to monitor your environment using CloudWatch, CloudTrail, and AWS Config, while maintaining compliance with services such as GuardDuty, Macie, and Inspector. Each chapter presents practical recipes for real-world scenarios, allowing you to apply security concepts. By the end of this book, you’ll be well versed in techniques required for securing AWS deployments and be prepared to gain the AWS Certified Security – Specialty certification.What you will learn Manage AWS accounts and users with AWS Organizations and IAM Identity Center Secure data and infrastructure with IAM policies, RBAC, and encryption Enhance web security with TLS, load balancers, and firewalls Use AWS services for logging, monitoring, and auditing Ensure compliance with machine-learning-powered AWS services Explore identity management with Cognito, AWS directory services, and external providers such as Entra ID Follow best practices to securely share data across accounts Who this book is for If you’re an IT security professional, cloud security architect, or a cloud application developer working on security-related roles and are interested in using AWS infrastructure for secure application deployments, then this Amazon Web Services book is for you. You’ll also find this book useful if you’re looking to achieve AWS certification. Prior knowledge of AWS and cloud computing is required to get the most out of this book.

Secure your Amazon Web Services (AWS) infrastructure with permission policies, key management, and network security, while following cloud security best practices Key Features Explore useful recipes for implementing robust cloud security solutions on AWS Monitor your AWS infrastructure and workloads using CloudWatch, CloudTrail, Config, GuardDuty, and Macie Prepare for the AWS Certified Security - Specialty exam by exploring various security models and compliance offerings Purchase of the print or Kindle book includes a free PDF eBook Book DescriptionAs a security consultant, implementing policies and best practices to secure your infrastructure is critical. This cookbook discusses practical solutions for safeguarding infrastructure, covering services and features within AWS that help implement security models, such as the CIA triad (confidentiality, integrity, and availability) and the AAA triad (authentication, authorization, and accounting), as well as non-repudiation. This updated second edition starts with the fundamentals of AWS accounts and organizations. The book then guides you through identity and access management, data protection, network security, and encryption. You’ll explore critical topics such as securing EC2 instances, managing keys with KMS and CloudHSM, and implementing endpoint security. Additionally, you’ll learn to monitor your environment using CloudWatch, CloudTrail, and AWS Config, while maintaining compliance with services such as GuardDuty, Macie, and Inspector. Each chapter presents practical recipes for real-world scenarios, allowing you to apply security concepts. By the end of this book, you’ll be well versed in techniques required for securing AWS deployments and be prepared to gain the AWS Certified Security – Specialty certification.What you will learn Manage AWS accounts and users with AWS Organizations and IAM Identity Center Secure data and infrastructure with IAM policies, RBAC, and encryption Enhance web security with TLS, load balancers, and firewalls Use AWS services for logging, monitoring, and auditing Ensure compliance with machine-learning-powered AWS services Explore identity management with Cognito, AWS directory services, and external providers such as Entra ID Follow best practices to securely share data across accounts Who this book is for If you’re an IT security professional, cloud security architect, or a cloud application developer working on security-related roles and are interested in using AWS infrastructure for secure application deployments, then this Amazon Web Services book is for you. You’ll also find this book useful if you’re looking to achieve AWS certification. Prior knowledge of AWS and cloud computing is required to get the most out of this book.

This practical guide provides over 100 self-contained recipes to help you creatively solve issues you may encounter in your AWS cloud endeavors. If you're comfortable with rudimentary scripting and general cloud concepts, this cookbook will give you what you need to both address foundational tasks and create high-level capabilities. AWS Cookbook provides real-world examples that incorporate best practices. Each recipe includes code that you can safely execute in a sandbox AWS account to ensure that it works. From there, you can customize the code to help construct your application or fix your specific existing problem. Recipes also include a discussion that explains the approach and provides context. This cookbook takes you beyond theory, providing the nuts and bolts you need to successfully build on AWS. You'll find recipes for: Organizing multiple accounts for enterprise deployments Locking down S3 buckets Analyzing IAM roles Autoscaling a containerized service Summarizing news articles Standing up a virtual call center Creating a chatbot that can pull answers from a knowledge repository Automating security group rule monitoring, looking for rogue traffic flows And more.

With the rise of the cloud, every aspect of IT has been shaken to its core. The fundamentals for building systems are changing, and although many of the principles that underpin security still ring true, their implementation has become unrecognizable. This practical book provides recipes for AWS, Azure, and GCP to help you enhance the security of your own cloud native systems. Based on his hard-earned experience working with some of the world's biggest enterprises and rapidly iterating startups, consultant Josh Armitage covers the trade-offs that security professionals, developers, and infrastructure gurus need to make when working with different cloud providers. Each recipe discusses these inherent compromises, as well as where clouds have similarities and where they're fundamentally different. Learn how the cloud provides security superior to what was achievable in an on-premises world Understand the principles and mental models that enable you to make optimal trade-offs as part of your solution Learn how to implement existing solutions that are robust and secure, and devise design solutions to new and interesting problems Deal with security challenges and solutions both horizontally and vertically within your business

If you intend to use Amazon Web Services (AWS) for remote computing and storage, Python is an ideal programming language for developing applications and controlling your cloud-based infrastructure. This cookbook gets you started with more than two dozen recipes for using Python with AWS, based on the author’s boto library. You’ll find detailed recipes for working with the S3 storage service as well as EC2, the service that lets you design and build cloud applications. Each recipe includes a code solution you can use immediately, along with a discussion of why and how the recipe works. You also get detailed advice for using boto with AWS and other cloud services. This book’s recipes include methods to help you: Launch instances on EC2, and keep track of them with tags Associate an Elastic IP address with an instance Restore a failed Elastic Block Store volume from a snapshot Store and monitor your own custom metrics in CloudWatch Create a bucket in S3 to contain your data objects Reduce the cost of storing noncritical data Prevent accidental deletion of data in S3

This practical guide provides over 100 self-contained recipes to help you creatively solve issues you may encounter in your AWS cloud endeavors. If you're comfortable with rudimentary scripting and general cloud concepts, this cookbook will give you what you need to both address foundational tasks and create high-level capabilities. AWS Cookbook provides real-world examples that incorporate best practices. Each recipe includes code that you can safely execute in a sandbox AWS account to ensure that it works. From there, you can customize the code to help construct your application or fix your specific existing problem. Recipes also include a discussion that explains the approach and provides context. This cookbook takes you beyond theory, providing the nuts and bolts you need to successfully build on AWS. You'll find recipes for: Organizing multiple accounts for enterprise deployments Locking down S3 buckets Analyzing IAM roles Autoscaling a containerized service Summarizing news articles Standing up a virtual call center Creating a chatbot that can pull answers from a knowledge repository Automating security group rule monitoring, looking for rogue traffic flows And more.