We can host this training at your preferred location. Contact us!

The AWS Security Governance at Scale course will help solutions architects, DevOps engineers, and security engineers. You’ll learn how to automate your cloud governance so that you can retire manual processes through AWS security and governance services and concepts. In this 1-day, classroom training course, an expert AWS instructor will dive deep into concepts that help you provide decision makers with the visibility, control, and governance necessary to protect sensitive data and systems. You’ll apply key services, concepts, and best practices through tutorials, hands-on labs, discussions, demonstrations, presentations, and group exercises.

What you'll learn

Establish a landing zone with AWS Control Tower
Configure AWS Organizations to create a multi-account environment
Implement identity management using AWS Single Sign-On (SSO) users and groups
Federate access using AWS SSO
And much more

Who should take this course

Solutions architects
Security DevOps engineers
Security engineers

What experience you'll need

Knowledge and experience with AWS services, such as AWS Control Tower, AWS Service Catalog, AWS Config, and AWS Systems Manager

We recommend that attendees of this course have taken AWS Security Fundamentals and AWS Security Essentials

Before attending this course, participants should have completed the following:

Required:

AWS Security Fundamentals course
AWS Security Essentials course

Optional:

AWS Cloud Management Assessment
Introduction to AWS Control Tower course
Automated Landing Zone course
Introduction to AWS Service Catalog course

In this course, you will learn to:

Establish a landing zone with AWS Control Tower
Configure AWS Organizations to create a multi-account environment
Implement identity management using AWS Single Sign-On users and groups
Federate access using AWS SSO
Enforce policies using prepackaged guardrails
Centralize logging using AWS CloudTrail and AWS Config
Enable cross-account security audits using AWS Identity and Access Management (IAM)
Define workflows for provisioning accounts using AWS Service Catalog and AWS Security Hub

Course Introduction

Instructor introduction
Learning objectives
Course structure and objectives
Course logistics and agenda

Module 1: Governance at Scale

Governance at scale focal points
Business and Technical Challenges

Module 2: Governance Automation

Multi-account strategies, guidance, and architecture
Environments for agility and governance at scale
Governance with AWS Control Tower
Use cases for governance at scale

Module 3: Preventive Controls

Enterprise environment challenges for developers
AWS Service Catalog
Resource creation
Workflows for provisioning accounts
Preventive cost and security governance
Self-service with existing IT service management (ITSM) tools

Lab 1: Deploy Resources for AWS Catalog

Create a new AWS Service Catalog portfolio and product.
Add an IAM role to a launch constraint to limit the actions the product can perform.
Grant access for an IAM role to view the catalog items.
Deploy an S3 bucket from an AWS Service Catalog product.

Module 4: Detective Controls

Operations aspect of governance at scale
Resource monitoring
Configuration rules for auditing
Operational insights
Remediation
Clean up accounts

Lab 2: Compliance and Security Automation with AWS Config

Apply Managed Rules through AWS Config to selected resources
Automate remediation based on AWS Config rules
Investigate the Amazon Config dashboard and verify resources and rule compliance

Lab 3: Taking Action with AWS Systems Manager

Setup Resource Groups for various resources based on common requirements
Perform automated actions against targeted Resource Groups

Module 5: Resources

Explore additional resources for security governance at scale

Why have you chosen us?

I have attended a training from Bilginc IT Academy before and I was satisfied.

I have attended a training from a different provider and it was not helpful.

Other

How many employees do you have in your IT department?

0 – 50

50 – 250

250 – 1000

1000+

AWS Security Governance at Scale Training Course in Hong Kong

Hong Kong is officially known as the Hong Kong Special Administrative Region of the People's Republic of China (HKSAR) and is a city and special administrative region of China on the eastern Pearl River Delta in South China. Hong Kong is one of the most densely populated places in the world, with over 7.5 million population. The official languages of the HKSAR are Chinese and English. Hong Kong is a highly developed territory and ranks fourth on the United Nations Human Development Index and the residents of Hong Kong have the highest life expectancies in the world.

The best time to visit Hong Kong is from September to December, since the temperatures, averaging between 19 to 28 degree Celsius. During this outdoor activities-friendly travelling season, you can take a walk along Victoria Harbour, visit the islands of Lantau, Lamma and Cheung Chau and participate in the Mid-Autumn Festival. Top choices of the tourists to visit in Hong Kong are Big Buddha statue, Wong Tai Sin Temple, Repulse Bay and the Beaches and Hong Kong Disneyland.

Explore our diverse range of IT courses, encompassing programming, software development, cyber security, data science, business skills, and Agile/Scrum. Wherever you are in Hong Kong, our seasoned instructors will bring practical training and expert knowledge to your preferred training venue.

AWS Security Governance at Scale Training in Hong Kong

What you'll learn

Who should take this course

What experience you'll need

Upcoming Trainings

AWS Security Governance at Scale Training in Hong Kong

What you'll learn

Who should take this course

What experience you'll need

Prerequisites

What You Will Learn

Outline

Upcoming Trainings