Dive into the core principles of AWS security and compliance. Understand the differences between AWS compliance and governance, and learn how to automate security and compliance.

Welcome to AWS Security and Cost Management

Exploring AWS Security and Cost Management

AWS Shared Responsibility Model

Create an EC2 virtual machine

Go serverless with Lambda

Options

AWS responsibilities

Customer responsibilities

Shared responsibility model

AWS compliance and governance

Audit with CloudTrail

Export CloudWatch logs to S3

AWS Security Hub

Amazon GuardDuty

AWS Shield

Tools for security

Security and compliance automation

Security hub

Trusted advisor

Threat detection

Introduction to AWS Security and Compliance

In this chapter, you'll delve into AWS security best practices, including the principle of least privilege and identity management through AWS IAM. You'll learn to secure networks using VPCs, NACLs, and firewalls, and protect your compute resources using security groups and encryption.

The principle of least privilege

Secrets manager

Tasks for root user

Root user protection

Identity and Access Management (IAM)

IAM Identity Center

Least privilege for S3 access

Access keys and password policy

Network Security in AWS

Network access control list (NACL)

AWS Marketplace

VPC Security

Compute and data security

Encryption-at-rest vs in-transit

Security Resources

Security group

Network and User Security

Explore the different pricing models that AWS has to offer, and learn how to manage budgets and costs. Discover the AWS tools to facilitate cost allocation, billing, and support, and discuss some cost optimization strategies using a case study.

AWS Pricing Models

EC2 purchase options

Data transfer costs

S3 pricing tiers

Manage AWS Budgets and Costs

Reserved Instance flexibility

Cost Explorer and Budgets

Pricing model vs free tools

Cost Allocation, Billing, and Support

AWS Organizations

Cost allocation tags

AWS Support options

Cost Optimization Strategies

Savings with serverless

Spot instances

S3 lifecycle policy

Wrap-up

Self reflection questions

Billing and Cost Management

Build a secure, compliant, and cost-optimized AWS cloud. This course simplifies the complexities of governance & security and suggests innovative ways to optimize your cloud spend. You will learn about the shared responsibility model, automation tools, and cost management.

This course will help you prepare for AWS Cloud Practioner certification's security, governance, and cost optimization topics.


<h2>Secure and Optimize Your AWS Cloud Environment</h2>
Mastering cloud security and cost management is critical for any organization using AWS. This course equips you with the skills to secure your cloud infrastructure while making the most of your money. Whether you’re new to AWS or looking to enhance your cloud management capabilities, this course offers hands-on guidance through the key concepts and tools required to protect and optimize your AWS environment.
<br><br>
<h2>Learn Cloud Security Essentials</h2>
In the first chapter, you’ll explore foundational security concepts like the AWS Shared Responsibility Model, which outlines the division of security duties between AWS and its customers. You'll also dive into governance and compliance, learning how to use tools like Security Hub, GuardDuty, and CloudTrail to monitor and protect your resources.
<br><br>
<h2>Master Identity, Network, and Data Security</h2>
In the second chapter, you’ll focus on securing user access and cloud networks. You’ll explore Identity and Access Management (IAM) to control permissions, apply the principle of least privilege, and secure VPCs with NACLs and firewalls. Additionally, you'll learn how to protect data at rest and in transit using encryption techniques and AWS Security Groups.
<br><br>
<h2>Optimize Costs and Resources in AWS</h2>
The final chapter takes a deep dive into cost management. You'll learn how to track expenses, identify underutilized resources, and use tools like AWS Trusted Advisor to optimize cloud spending without compromising performance or security.
<br><br>
<h2>Become AWS Security and Cost Management Ready</h2>
By the end of this course, you’ll have the knowledge and hands-on experience to protect your AWS environment and optimize cloud costs. Whether you're aiming for AWS certifications or seeking to enhance your organization's cloud strategy, this course will provide you with practical skills to manage AWS securely and efficiently.


AWS Concepts

Master AWS security, governance, and cost optimization to prepare for the Cloud Practitioner certification.

AWS Security and Cost Management Concepts

AWS Cloud Practitioner (CLF-C02)

Integrates with multiple AWS services to aggregate security findings

Assesses AWS accounts against security standards and provides a consolidated security score

Detect anomalies in account and workload activity

Monitors AWS CloudTrail logs, VPC Flow Logs, and DNS logs for unauthorized or malicious activities

Protects against Distributed Denial of Service (DDoS) attacks

Advanced protection with AWS WAF integration for web applications

Tools for security

AWS Security and Cost Management Concepts

Interaktive Übung