AWS Security Best Practices for Developers

Course details

Security matters to everyone, but solid security practices start with the developer of an application. In this developer-centered course, instructor and AWS Certified Solutions Architect Carlos Rivas shows how to build stronger, more secure applications for deployment on Amazon Web Services. Learn core AWS security development principles around Identity and Access Management (IAM), S3 storage, and Key Management Service (KMS), to ensure your users, systems, and data are secure on the cloud. Plus, learn how to use Cognito to establish user identity without maintaining unique login credentials for each application.

Learning objectives
Identity and Access Management security
S3 security policies, encryption, and version control
KMS encryption
User authentication with Cognito

Concepts

Introduction

Securing your application
What you should know

Identity and Access Management

Important concepts
Uses and access keys
Roles and policies
IAM key points
Challenge - IAM roles and policies
Solution - IAM roles and policies

Amazon Simple Storage Service (S3)

S3 as a static website
Bucket policies
S3 bucket encryption
S3 object versioning and MFA delete
S3 key points
Challenge - S3 presigned URL challenge
Solution - S3 presigned URL challenge

Key Management Service Encryption

Key Management Service (KMS) introduction
Using AWS KMS
KMS key points
Challenge - Key Management Service
Solution - Key Management Service

User Identities with Cognito and Web

Cognito concepts
Workflow
Cognito demonstration
Cognito key points
Challenge - Cognito automated login
Solution - Cognito automated login

Certificate Manager

Creating and managing certificates
Using certificates with AWS Resources
AWS Certificates Manager and EC2 instances

Parameter Store and Secrets Manager

Parameter Store for sensitive data
Using Parameter Store from EC2
Secrets Manager overview

Security Alerts in AWS

Root login alerts
Detecting unauthorized instance stops
Checking for unused credentials

Conclusion

Get familiar with AWS tools