SCS-C01: AWS Certified Security Specialist, Part 2 of 6: Logging and Monitoring
with expert Zeal Vora
Course description
Amazon Web Services Certified Security Specialty is an exam intended to validate an individuals experience in a security role. This course covers Domain 2 Logging and Monitoring which counts for 20% of the exam.
Prerequisites
two years of hands-on experience securing AWS and 5 years or more in IT security experience designing and implementing security solutions.
Meet the expert
Zeal works primarily as a Cloud Security Consultant guiding organizations to re-build their infrastructure with security in mind. Zeal also holds more then 13+ certifications ranging from RedHat Certified Architect to AWS Security.
Course outline
Module 3
Vulnerability - Exploit - Payload (30:35)
- Introduction (00:08)
- What is VEP (05:43)
- Exploiting EasyChat (07:33)
- Nessus - VEP (08:23)
- CVE and CVSS (08:38)
- Summary (00:08)
AWS Inspector (25:34)
- Introduction (00:08)
- AWS Inspector (04:57)
- Demo: AWS Inspector (11:21)
- Security Hub (08:59)
- Summary (00:08)
Overview of Layer 7 Firewalls (37:30)
- Introduction (00:08)
- WAF Overview (06:16)
- AWS WAF (12:50)
- Demo: WAF (18:06)
- Summary (00:08)
Module 4
AWS Systems Manager (29:40)
- Introduction (00:08)
- Overview of AWS Systems Manager (07:20)
- SSM Agent (06:11)
- Sessions Manager (10:00)
- SSM Run Command (05:52)
- Summary (00:08)
Patch Manager (24:29)
- Introduction (00:08)
- SSM - Patch Manager (09:11)
- Parameter Store (06:24)
- SSM Automation (08:37)
- Summary (00:08)
SSM Inventory (29:33)
- Introduction (00:08)
- SSM - Inventory (07:56)
- Demo: SSM - Inventory (04:08)
- Unified CloudWatch Agent (07:43)
- Demo: Unified CloudWatch Agent (09:29)
- Summary (00:08)
Module 5
Amazon EventBridge (40:56)
- Introduction (00:08)
- Amazon EventBridge (09:31)
- Amazon Athena (05:04)
- AWS Config (12:01)
- Demo: AWS Config (14:02)
- Summary (00:08)
Trusted Advisor and CloudTrail (36:53)
- Introduction (00:08)
- Trusted Advisor (06:58)
- CloudTrail (07:49)
- Demo: CloudTrail (06:55)
- CloudTrail Event Types (07:50)
- CloudTrail Log File Integrity Validation (07:02)
- Summary (00:08)
Module 6
AWS Macie (21:53)
- Introduction (00:08)
- AWS Macie (05:13)
- Demo: AWS Macie (08:01)
- S3 Event Notification (08:21)
- Summary (00:08)
VPC Flow Usage (36:28)
- Introduction (00:08)
- VPC Flow Logs (12:57)
- VPC Flow Log In-Detail (06:03)
- Centralized Logging Architecture (06:59)
- Cross Account CloudTrail (05:40)
- Cross Account CloudTrail S3 Policy (04:32)
- Summary (00:08)
SNS and Kinesis (24:45)
- Introduction (00:08)
- SNS (08:47)
- Amazon Kinesis (07:43)
- Amazon Kinesis Services (07:58)
- Summary (00:08)