You're reading from Mastering AWS Security Strengthen your cloud environment using AWS security features coupled with proven strategies

Product type Paperback

Published in Apr 2024

Publisher Packt

ISBN-13 9781805125440

Length 370 pages

Edition 2nd Edition

Tools

AWS

Concepts

Cloud Security

Author (1):

Laurent Mathieu

View More author details

Table of Contents (20) Chapters

Preface

1. Part 1: Foundations of AWS Security FREE CHAPTER

2. Chapter 1: Introduction to AWS Security Concepts and the Shared Responsibility Model

3. Chapter 2: Infrastructure Security – Keeping Your VPC secure

4. Chapter 3: Identity and Access Management – Securing Users, Roles, and Policies

5. Chapter 4: Data Protection – Encryption, Key Management, and Data Storage Best Practices

6. Chapter 5: Introduction to AWS Security Services

7. Part 2: Architecting and Deploying Secure AWS Environments

8. Chapter 6: Designing Secure Microservices Architectures in AWS

9. Chapter 7: Implementing Security for Serverless Deployments

10. Chapter 8: Secure Design Patterns for Multi-Tenancy in Shared Environments

11. Chapter 9: Automate Everything to Build Immutable and Ephemeral Resources

12. Part 3: Monitoring, Automation and Continuous Improvement

13. Chapter 10: Advanced Logging, Auditing, and Monitoring in AWS

14. Chapter 11: Security Compliance with AWS Config, AWS Security Hub, and Automated Remediation

15. Chapter 12: DevSecOps – Integrating Security into CI/CD Pipelines

16. Chapter 13: Keeping Up with Evolving AWS Security Best Practices and Threat Landscape

17. Chapter 14: Closing Note

18. Index

Why subscribe?

19. Other Books You May Enjoy

Data Protection – Encryption, Key Management, and Data Storage Best Practices

Welcome to the fourth chapter of our in-depth exploration of AWS security. This chapter is dedicated to the critical subject of data protection within AWS, a topic that is indispensable for any organization aiming to secure its assets in the cloud. We will kick off this chapter by delving into AWS encryption mechanisms, focusing on how AWS approaches data-at-rest and data-in-transit encryption. This first part will pave the way for a comprehensive understanding of the types of encryption supported by AWS. We will discuss envelope encryption, symmetric versus asymmetric encryption, and the options of using bring-your-own or AWS-managed keys. As we move forward, the spotlight will turn to the management of cryptographic keys. We will explore AWS Key Management Service (KMS) in detail, covering the types of keys, their life cycles, and best practices for key policies and access management. We will also...