Hello, my name is Stuart Scott, and I am the AWS content Director here at Cloud Academy. Feel free to connect with me to ask any questions using the details shown on the screen, alternatively you can always get in touch with us here by sending an e-mail to support@cloudacademy.com where one of our Cloud experts will reply to your question.

This course has been designed to provide you with the knowledge and skills required to help you answer the following question from the Security pillar of the AWS Well Architected Framework, ‘how do you manage permissions for people and machines?

To help us answer this question for our own workloads we need to dive deeper into the framework itself, and you can do this within the appendix of AWS Well architected framework in the AWS documentation found here: https://docs.aws.amazon.com/wellarchitected/latest/framework/sec-03.html This guide will highlight every implementation step recommended by AWS.

This section of the AWS well architected framework is broken down into 9 different best practice subsections, each defining multiple recommendations. These best practices are as follows:

SEC03-BP01 Define access requirements
SEC03-BP02 Grant least privilege access
SEC03-BP03 Establish emergency access process
SEC03-BP04 Reduce permissions continuously
SEC03-BP05 Define permissions guardrails for your organization
SEC03-BP06 Manage access based on lifecycle
SEC03-BP07 Analyze public and cross-account access
SEC03-BP08 Share resources securely within your organization
SEC03-BP09 Share resources securely with a third party

Based on these AWS well architected framework best practices, this course has been curated and devised to provide you with a path of recommended content including courses and labs to help you adhere and align to these security actions. This course should be used as a knowledge guide for the services and features discussed, and in conjunction with the official AWS well architected framework which details the recommendations put forward by AWS within each best practice.

Upon completion, you will have the understanding and knowledge of being able to:

Identify potential security weaknesses and vulnerabilities relating to SEC 3
Plan proposals relating to SEC 3 to enable you to adhere to best practices
Implement environment changes based on your proposal

Please be aware that this course only focuses on SEC 3 which forms a small section of the Security Pillar, there are 10 other sections which aim to answer the following questions:

SEC 1 - How do you securely operate your workload?
SEC 2 - How do you manage authentication for people and machines?
SEC 4 - How do you detect and investigate security events?
SEC 5 - How do you protect your network resources?
SEC 6 - How do you protect your compute resources?
SEC 7 - How do you classify your data?
SEC 8 - How do you protect your data at rest?
SEC 9 - How do you protect your data in transit?
SEC 10 - How do you anticipate, respond to, and recover from incidents?
SEC 11 - How do you incorporate and validate the security properties of applications throughout the design, development, and deployment lifecycle?

Feedback on our courses here at Cloud Academy is valuable to both us as trainers and any students looking to take the same course in the future. If you have any feedback, positive or negative, it would be greatly appreciated if you could contact support@cloudacademy.com.

Thank you for your time and good luck with your continued learning of cloud computing. Thank you.

AWS WAF - Security Pillar SEC 3 - How do you manage permissions for people and machines?