Within AWS there are a variety of services that can be used to secure your environments and workloads. This repository contains a collection of security oriented workshops that will guide you through prepared scenarios that represent common use cases and operational tasks and give you hands on experience with a wide range of AWS services. The workshops closely align with the Security Perspective components of our Cloud Adoption Framework, which can be used to help you structure your selection and implementation of controls that are right for your organziation. Captured below are the high level security components:
Please review and complete all prerequisites before attempting these workshops.
- Threat Detection and Remediation - This workshop demonstrates how you can use AWS Security services such Amazon GuardDuty and Amazon Macie to detect malicious and unauthorized threats in an environment. You'll learn how to setup detective controls in your environment, investigate a variety of findings, and put in place automated remediations using Lambda.
In order to complete these workshops you'll need a valid, usable AWS Account with Admin permissions. The code and instructions in these workshops assume only one student is using a given AWS account at a time. If you try sharing an account with another student, you'll run into naming conflicts for certain resources.
Use a personal account or create a new AWS account to ensure you have the neccessary access. This should not be an AWS account from the company you work for.
All of the resources you will launch as part of these workshops are eligible for the AWS free tier if your account is less than 12 months old. See the AWS Free Tier page for more details. If you are doing this workshop as part of an AWS sponsored event, you will receive credits to cover the costs.
We recommend you use the latest version of Chrome or Firefox to complete this workshop.
For any workshop module that requires use of the AWS Command Line Interface (see above), you also will need a plain text editor for writing scripts. Any editor that inserts Windows or other special characters potentially will cause scripts to fail.
This sample code is made available under a modified MIT license. See the LICENSE file.