1.
IAM
1.
IAM Policy
1.
Policy详解
2.
Resouced Based Policy
3.
Permission Boundaries
4.
Decision making Tree
5.
ResourceTag VS PrincipalTag
6.
Credential provider chain
7.
PrincipalOrgID
8.
MultiFactorAuthPresent
9.
PassRole
2.
STS
1.
Security Token Service - STS
2.
STS Version
3.
EC2 Role与STS
4.
跨帐号assume Role
5.
Assume Role Session Hour设置
3.
IAM Role Anywhere
1.
创建证书
2.
配置IAM Roles Anywhere
3.
使用Roles Anywhere访问S3
4.
权限管理
5.
使用代码与Role Anywhere交互
4.
Others
2.
强制用户开启MFA
3.
非root用户访问帐单
5.
IAM Identity Center
1.
创建user和group
2.
创建及配置Permission Sets
3.
测试用户访问
4.
基于时间的访问控制
5.
基于属性的访问控制（ABAC）
6.
将Okta与Identity Center结合使用
7.
将Okta与Identity Center结合使用 - II
6.
Directory Service
1.
环境准备
2.
创建AWS Managed Microsoft AD
3.
部署 AWS Managed Microsoft AD 管理实例
4.
跨账户共享AWS Managed Microsoft AD
5.
AWS Managed Microsoft AD启用多region
6.
Active Directory的安全与审计
7.
Windows 事件日志转发
8.
细粒度密码策略
33.
Lab 4 - Deploying a Single Tier Public Key Infrastructure (PKI) Infrastructure
34.
Lab 5 - Create a CloudWatch Alarm Based on Windows Event logs
35.
Lab 6 - Disable legacy network ciphers and protocols used by AWS Managed Microsoft AD domain controllers
36.
Route 53 Resolvers with Active Directory
37.
Lab 1 - Configuring Route 53 Resolver Endpoints
2.
EC2 Security
1.
Instance Metadata Service - IMDS
2.
关闭metadata service
3.
WAF
1.
WAF上手实验
1.
准备Cloud9环境
2.
创建Juice Shop应用
3.
Web ACL与托管规则
4.
自定义规则
5.
使用JSON自定义复杂规则
6.
测试新规则
7.
保存日志记录
8.
Cleanup
2.
WAF的高级特性
1.
使用图形验证码
2.
使用Custom Rule保护特定路径
3.
进行Bot Control
4.
阻止特定bot的访问
5.
限制API访问速率
6.
为AWS WAF指标创建CloudWatch Alarm
7.
查看Bot Control Dashboard
8.
Rule Group
3.
WAF管理Bot Traffic
1.
Cloudwatch Logs监控
2.
进行Bot Control
3.
识别和允许想要的Bot
4.
CAPTCHA防护
5.
WAF成本优化
6.
创建Dashboard
4.
KMS
1.
Envelope Encryption
2.
KMS的两种工作模式
3.
KMS 的密钥轮换机制
4.
CMK的删除
5.
Data Key Caching
6.
创建CMK
7.
Envelop Encryption SDK
9.
企业级KMS 密钥策略审计方案
1.
环境准备
2.
构建方案 I
3.
构建方案 II
4.
附：Lambda检查逻辑
6.
Incident Response
1.
GuardDuty
2.
Security Hub
3.
Detective
4.
AWS Shield
5.
Amazon Inspector
7.
Okta + SAML
1.
Managed Grafana与Okta SAML集成
2.
OpenSearch Dashboard使用Okta SAML登录
8.
AWS Private CA
1.
创建Private CA - Root
2.
创建Subordinate CA
3.
将证书用在内网应用
4.
使用证书保护EKS数据
5.
在Ingress上终止TLS
6.
Pod上终止TLS - 端到端加密
7.
PCA事件的监控
清除历史
© 2021 Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS Security
>
Incident Response
> Amazon Inspector
Amazon Inspector
