Continuous Compliance on AWS (The DevSecOps on AWS Series) LiveLessons

Continuous Compliance on AWS (The DevSecOps on AWS Series) LiveLessons

English | MP4 | AVC 1280×720 | AAC 44KHz 2ch | 5h 11m | 4.24 GB

Automatically adhere to best practices by learning to run compliance as code in a Continuous Delivery process using AWS Config Rules, Amazon CloudWatch Event Rules, AWS CloudFormation, AWS CodePipeline, and AWS Lambda.

In this course, you will learn to use AWS services to define compliance as code, including AWS Config Rules, Amazon CloudWatch Event Rules, AWS CloudFormation, AWS CodePipeline, and AWS Lambda. You also learn how to use a combination of these tools to prevent, detect, and remediate noncompliant resources in your software systems. Paul Duvall has six AWS certifications, including AWS Certified DevOps Engineer Professional and AWS Certified Security – Specialty. He has architected, implemented, and managed software and systems solutions for more than 20 years. Throughout the course, you will have the opportunity to work along with Paul as he demonstrates how to automate the provisioning of these services and how to include them as part of a deployment pipeline using AWS CloudFormation and AWS CodePipeline.

Learn How To

  • Apply key compliance concepts on AWS.
  • Use AWS services and tools to automate compliance, including AWS CloudFormation, AWS Config Rules, AWS
  • CodePipeline, Amazon CloudWatch Event Rules, and AWS Lambda.
  • Integrate Continuous Compliance workflows for prevention, detection, and remediation into your software delivery process.

Lesson 1: Automating AWS Resources
This lesson teaches the key components of AWS CloudFormation and AWS CodePipeline. You learn how to use these tools to help automate the provisioning of AWS resources and the software delivery workflows for all software assets, including security and compliance as code.

Lesson 2: Preventive Controls
This lesson teaches how to prevent infrastructure from being provisioned if there are noncompliant rules. You learn to use an open source framework called cfn_nag to prevent CloudFormation templates that have security vulnerabilities from being launched, and to run cfn_nag checks as part of a fully automated deployment pipeline.

Lesson 3: Detective Controls
This lesson teaches how to establish detective controls that discover changes to AWS infrastructure and to apply rules to determine if the resource is compliant or noncompliant. You learn to describe the AWS Config service and how to use AWS Config Rules to detect changes that violate organizational or team rules; to configure and run managed Config Rules against your AWS account; and to apply these rules by launching a CloudFormation stack.

Lesson 4: More Detective Controls
Building on Lesson 3, this lesson teaches how to apply custom rules and use CloudWatch Event to establish detective controls for determining compliancy. You learn how to describe Custom Config Rules and CloudWatch Even Rules, and how to write your own Custom Config Rule using the Rules Development Kit.

Lesson 5: Automated Remediation
This lesson teaches how to automatically respond to and fix noncompliant resources identified by your automated compliance rules. You learn to describe different ways to do automatic remediations; create an automatic remediation using CloudWatch Event Rules and Config from the Console; and run an AWS Config Rule auto remediation routine using CodePipeline, CloudFormation, and AWS Lambda.

Lesson 6: Continuous Compliance
This lesson teaches how to combine preventive, detective, and remediation controls for a complete Continuous Compliance solution. You learn to describe a workflow for the prevention, detection, and remediation of noncompliant resources; to manually provision an automatic remediation solution using Config Rules, CloudWatch Event Rules, and Lambda; and to create a continuous delivery compliance using CloudFormation and CodePipeline.

Table of Contents

01 Continuous Compliance on AWS LiveLessons – Introduction
02 0.1 The Current State of Compliance
03 0.2 Setup Development Environment
04 Learning objectives
05 1.1 AWS CloudFormation
06 1.2 AWS CodePipeline
07 1.3 Launch a CloudFormation stack that deploys a deployment pipeline
08 1.4 Lesson 1 Quiz
09 Learning objectives
10 2.1 Describe cfn_nag
11 2.2 Run cfn_nag from the command line
12 2.3 Configure cfn_nag to run from CodePipeline
13 2.4 Lesson 2 Quiz
14 Learning objectives
15 3.1 Describe AWS Config and Config Rules
16 3.2 Setup AWS Config Rules via console
17 3.3 Run Managed Config Rules from the console
18 3.4 Run Managed Config Rules using CloudFormation
19 3.5 Lesson 3 Quiz
20 Learning objectives
21 4.1 Describe Custom Config Rules
22 4.2 Describe CloudWatch Event Rules
23 4.3 Setup Custom Config Rules using the Rules Development Kit (RDK)
24 4.4 Lesson 4 Quiz
25 Learning objectives
26 5.1 Describe different ways to perform automatic remediations
27 5.2 Run an AWS Config Rule auto remediation routine from the Console
28 5.3 Run an AWS Config Rule auto remediation routine from CloudFormation
29 5.4 Lesson 5 Quiz
30 Learning objectives
31 6.1 Describe prevention, detection, and remediation workflow
32 6.2 Manually provision an automatic remediation solution using AWS Console
33 6.3 Create deployment pipeline for detection and remediation workflow
34 6.4 Lesson 6 Quiz
35 Continuous Compliance on AWS LiveLessons – Summary