AWS Account Setup Best Practices – Chad Smith

Salepage link: At HERE. Archive: http://archive.is/v4rDP

Video Description

2+ Hours of Video Instruction

Overview 

AWS Account Setup Best Practices LiveLessons identifies best practices and good guidance that can be applied to existing accounts, including account creation and management, from single- to multi-account organizations. The goal is to provide possible strategies to cut overhead and have seamless account functionality. It discusses how to keep track of billing across diverse architectures using metadata tags; introduces good data security practices and account monitoring strategies that can be used to improve awareness of account activities; and covers recent AWS offerings that consolidate and automate tasks such as account security, account management, and backups. The course closes with pointers toward other AWS and non-AWS tools that can be used to make your life easier and more cost-efficient.

The inspiration for this course came from the realization that there isn’t a targeted discussion around what happens when you’ve already used AWS for a period of time, and realize you didn’t start with a detailed strategy in place. With Chad Smith’s lengthy background in AWS, along with numerous video courses, including the “AWS Certified Security – Specialist Complete Video Course,” he is uniquely positioned to guide you through streamlining your AWS management. 

Skill Level

Beginner+

Learn How To 

* Set up the root account and know when to use it* Use access control policies* Understand monitoring and its impact on billing* Use CloudWatch and set up billing alarms* Use tags and implement compliance features* Use data protection mechanisms in AWS* Use CloudTrail, GuardDuty, and Macie for monitoring* Use Control Tower, Security Hub, and AWS Backup to reduce overhead

Who Should Take This Course 

* Anyone getting into AWS for the first time and looking specifically for account setup strategies and best practices* Anyone with a basic knowledge of AWS who has been using it for a while and wants to restart with a strategy in place before account setup

Course Requirements

Basic understanding of AWS fundamental concepts

Lesson Descriptions

Lesson 1, “Securing AWS Account Access,” covers the basics of account creation, including the root account and when to use it and access control using policies. You will see a demonstration using AWS Organizations and IAM resources within a newly created account.

Lesson 2, ” Implementing Billing Alarms and Budgets,” discusses monitoring and how it applies to the AWS monthly bill. The CloudWatch service is introduced, along with how to create billing alarms and budgets, followed by a demonstration of each.

Lesson 3, “Tagging Resources with Compliance Checks,” goes over tagging strategies in AWS and how this relates to compliance monitoring. Different services that create tags automatically on the resources they provision are discussed, and the lesson finishes with a demonstration of tagging compliance controls.

Lesson 4, “Protecting Data In-Transit and At-Rest,” details different types of data protection mechanisms in AWS. Services that implement encryption at-rest, both by default as an option are covered, along with encryption in-transit using services and networking features. The lesson then goes into data protection compliance controls and finishes with a demonstration of how to use some of these features in a real-world setting.

Lesson 5, “Monitoring Your AWS Account Activity,” covers account activity audits and how to turn this into actual monitoring. CloudTrail is introduced, as well as the AWS account Event bus, which can be used to funnel events to different services or consolidate events across accounts. This lesson also covers both GuardDuty and Macie as built-in services monitoring activity for abnormal behavior. The lesson ends with a demonstration of how to enable and configure both of these services.

Lesson 6, “Simplifying Account and Infrastructure Management,” dives into recently released offerings that can greatly reduce the overhead of managing accounts and resources. It starts with Control Tower and discusses how it can be used to manage multi-account configurations. Next, it covers Security Hub and its features for consolidating security monitoring. After that, AWS Backup and how it can be used to manage backup processes and lifecycles is discussed, and the lesson finishes with demonstrations of Security Hub and the creation of backup plans.

Lesson 7, “Helpful Resources,” provides some direction on other tools that can be used to automate activities in AWS. It recommends some reading material in the form of AWS whitepapers that can provide guidance and explain some of these best practices in more detail.

About Pearson Video Training

Pearson publishes expert-led video tutorials covering a wide selection of technology topics designed to teach you the skills you need to succeed. These professional and personal technology videos feature world-leading author instructors published by your trusted technology brands: Addison-Wesley, Cisco Press, Pearson IT Certification, Prentice Hall, Sams, and Que. Topics include IT Certification, Network Security, Cisco Technology, Programming, Web Development, Mobile Development, and more. Learn more about Pearson Video training at http://www.informit.com/video.

Video Lessons are available for download for offline viewing within the streaming format. Look for the green arrow in each lesson

Download associated code here

• bit.ly/kubernetes-tutorial
• bit.ly/istio-tutorial
• bit.ly/knative-tutorial

Table of Contents

1. Introduction
   1. AWS Account Setup Best Practices LiveLessons (Video Training): Introduction00:03:35
2. Lesson 1: Securing AWS Account Access
   1. Learning objectives00:00:34
   2. 1.1 AWS Account Basics00:07:45
   3. 1.2 Root Account00:06:42
   4. 1.3 Permission Types00:03:19
   5. 1.4 Demo: AWS Organizations00:05:26
   6. 1.5 Demo: Account Access and Permissions00:03:25
3. Lesson 2: Implementing Billing Alarms and Budgets
   1. Learning objectives00:00:23
   2. 2.1 CloudWatch Introduction00:03:24
   3. 2.2 Monitoring Infrastructure Costs00:04:26
   4. 2.3 Demo: Billing Alarms and Budgets00:09:05
4. Lesson 3: Tagging Resources with Compliance Checks
   1. Learning objectives00:00:28
   2. 3.1 Tagging Strategies00:04:24
   3. 3.2 Applying Tags Automatically00:03:23
   4. 3.3 Demo: Tagging Compliance Controls00:07:40
5. Lesson 4: Protecting Data In-Transit and At-Rest
   1. Learning objectives00:00:39
   2. 4.1 Encryption at Rest00:04:50
   3. 4.2 Encryption in Transit00:03:18
   4. 4.3 Implementing Compliance00:03:36
   5. 4.4 Demo: Data Protection Compliance Controls00:08:56
6. Lesson 5: Monitoring Your AWS Account Activity
   1. Learning objectives00:00:46
   2. 5.1 CloudTrail00:02:51
   3. 5.2 AWS Acount Event Bus00:02:05
   4. 5.3 GuardDuty and Macie00:04:10
   5. 5.4 Demo: Enable and Configure GuardDuty/Macie00:05:13
7. Lesson 6: Simplifying Account and Infrastructure Management
   1. Learning objectives00:00:47
   2. 6.1 AWS Control Tower00:03:02
   3. 6.2 AWS Security Hub00:04:13
   4. 6.3 AWS Backups00:02:41
   5. 6.4 Demo: Enable and Use AWS Security Hub00:07:29
   6. 6.5 Demo: Create Backup Plans with AWS Backup00:06:44
8. Lesson 7: Helpful Resources
   1. Learning objectives00:00:30
   2. 7.1 AWS Automation Tools00:03:24
   3. 7.2 Other Tools00:04:07
   4. 7.3 Whitepapers00:03:09
9. Summary
   1. AWS Account Setup Best Practices LiveLessons (Video Training): Summary00:01:12