AWS has revolutionized the technology landscape by providing on-demand and pay-as-you-go IT services. Builders can experiment at unprecedented scale and speed, delivering innovative business outcomes and enhanced value to customers. Businesses are moving more of their applications to AWS to take advantage of the cloud.

The book begins with strategic design, detailing governance and building a strong AWS Organization security architecture. You will learn about the various AWS security services, features, and best practices gathered from the author’s years of experience implementing enterprise-grade security. Learn what constitutes a great security culture and why it is so critical for an organisation to succeed. Understand the AWS Shared Responsibility Model and how AWS helps you meet your part of the responsibility. Then look into how to build a good security architecture on AWS and learn how you can build around five primary domains of AWS security – identity and access management, infrastructure security, data protection, vulnerability management, and incident response.

By the end of this book, you will possess the comprehensive technical and operational knowledge to confidently design, manage, and continuously improve a high-security, resilient AWS program aligned with business objectives.

What you will learn

● Understand the shared responsibility model and deploy a security champions program.

● Design security governance and structure a secure AWS Organization architecture.

● AWS security services, features, and best practices.

● Manage data classification, encryption, and PKI across the data lifecycle.

● Practical guidance to build enterprise-grade security with hands-on learning.

● New trends and technologies impacting AWS security.

● Build incident response plans and improve automation through the control cycle.

Who this book is for

This book is for professionals, including security leaders, architects, engineers, and cloud platform engineers responsible for the security of their organizations. This book will also help students with no prior AWS working experience be job-ready by providing practical knowledge of different aspects of AWS security.

Table of Contents

1. Security the Enabler

2. Designing for Security

3. Identity and Access Management

4. Infrastructure Protection

5. Data Protection

6. Threat Detection

7. Vulnerability Management

8. Incident Response

9. CI/CD Security

10. AWS Security Best Practices and Future Trends