Securing the AWS Cloud

Make your next Amazon Web Services deployment secure and private

Dive into the world of cloud security with Securing the AWS Cloud: A Guide for Learning to Secure AWS Infrastructure by Brandon Carroll, a comprehensive guide crafted for those eager to fortify their Amazon Web Services (AWS) deployments. Whether you are starting from scratch or looking to enhance an existing setup, this book serves as your essential roadmap to understanding and implementing robust security measures in the AWS environment.

The author, a seasoned infrastructure security expert, begins with the basics of cybersecurity and gradually introduces more complex AWS-specific security practices. His structured approach helps you use your existing knowledge to effectively secure your AWS cloud. The book navigates through a series of real-world challenges and provides actionable solutions, equipping you with the skills needed to tackle security issues head-on.

You'll:

• Learn foundational security practices to safeguard your AWS environment right from the start.
• Master advanced techniques for identity management, threat detection, and data security within AWS.
• Develop resilience and recovery strategies to maintain robust security and ensure business continuity.

Securing the AWS Cloud is the ideal resource for IT professionals, system administrators, and anyone aspiring to specialize in cloud security. It's tailor-made to enhance your ability to deploy secure, reliable, and private AWS solutions consistently. If you're ready to take your AWS security skills to the next level, don't wait. Buy your copy today and start building a safer cloud environment!

Preface ix

Acknowledgments xi

Chapter 1: Introduction to Cloud Security 1

Chapter 2: AWS Security Fundamentals 7

Chapter 3: Identity and Access Management on AWS 27

Chapter 4: AWS Identity Center: Centralizing Access Management 63

Chapter 5: Infrastructure Protection on AWS 85

Chapter 6: Threat Detection and Management on AWS 141

Chapter 7: Data Security and Cryptography on AWS 165

Chapter 8: Monitoring, Logging, and Compliance on AWS 207

Chapter 9: Resilience and Recovery Strategies 265

Chapter 10: Security Operations and Automation 285

Chapter 11: Applying the Developer Mindset to AWS Security 317

Chapter 12: Implementing GitOps for AWS Infrastructure 335

Index 367

BRANDON CARROLL is an Amazon Web Services Certified Solutions Architect and currently works as a Senior AWS Security Developer Advocate. He’s a seasoned cybersecurity professional with extensive experience teaching and implementing security solutions.

An A-to-Z guide to securing your Amazon Web Services environment

In Securing the AWS Cloud: A Guide for Learning to Secure AWS Infrastructure, veteran infrastructure security expert Brandon Carroll delivers a practical, hands-on resource designed to equip you with the foundational security knowledge you need to secure your Amazon Web Services (AWS) environment. From basic online security principles to advanced AWS cloud security techniques, this book explains everything you need to know to make a new or existing AWS deployment as secure and private as possible.

Beginning with fundamental concepts of cybersecurity, the author gradually progresses to more sophisticated AWS-specific security practices. His approach is designed to allow you to build on your existing knowledge and effectively apply it to the AWS cloud. You'll explore common challenges — and solutions to those challenges — with clear, straightforward guidance.

From identity and access management to infrastructure protection, threat detection and management, data security and cryptography, and resilience and recovery strategies, this book covers every relevant aspect of securing an AWS cloud deployment. Perfect for practicing and aspiring information technology professionals and system administrators, Securing the AWS Cloud is suitable for anyone who aims to improve their ability to deploy secure AWS solutions, consistently and efficiently.