You're reading from AWS Certified Security – Specialty (SCS-C02) Exam Guide Get all the guidance you need to pass the AWS (SCS-C02) exam on your first attempt

Product type Paperback

Published in Apr 2024

Publisher Packt

ISBN-13 9781837633982

Length 614 pages

Edition 2nd Edition

Languages

Python

Tools

AWS

Concepts

IT Certification

Authors (2):

Stuart Scott

Adam Book

View More author details

Table of Contents (29) Chapters

Preface

1. Section 1:AWS Security Fundamentals FREE CHAPTER

2. Chapter 1: AWS Shared Responsibility Model

3. Chapter 2: Fundamental AWS Services

4. Chapter 3: Understanding Attacks on Cloud Environments

5. Section 2:Incident Response

6. Chapter 4: Incident Response

7. Chapter 5: Managing Your Environment with AWS Config

8. Chapter 6: Event Management with Security Hub and GuardDuty

9. Section 3:Logging and Monitoring

10. Chapter 7: Logs Generated by AWS Services

11. Chapter 8: CloudWatch and CloudWatch Metrics

12. Chapter 9: Parsing Logs and Events with AWS Native Tools

13. Section 4:Infrastructure Security

14. Chapter 10: Configuring Infrastructure Security

15. Chapter 11: Securing EC2 Instances

16. Chapter 12: Managing Key Infrastructure

17. Chapter 13: Access Management

18. Section 5:Identity and Access Management

19. Chapter 14: Working with Access Policies

20. Chapter 15: Federated and Mobile Access

21. Chapter 16: Using Active Directory Services to Manage Access

22. Section 6:Data Protection

23. Chapter 17: Protecting Data in Flight and at Rest

24. Chapter 18: Securely Connecting to Your AWS Environment

25. Chapter 19: Using Certificates and Certificate Services in AWS

26. Chapter 20: Managing Secrets Securely in AWS

27. Chapter 21: Accessing the Online Practice Resources

28. Other Books You May Enjoy

Understanding the Purpose of AWS CloudHub

AWS VPN CloudHub is a managed service that allows you to connect multiple AWS Site-to-Site VPN connections securely. This enables your sites to communicate with each other and not just with resources in your VPC. You can see from the following image that CloudHub allows connectivity from multiple remote locations (just like the Direct Connect gateway) but does so using VPN connections instead of Direct Connect circuits.

Figure 18.11: The hub-and-spoke model of AWS CloudHub

AWS VPN CloudHub operates on a simple hub-and-spoke model, as shown in Figure 18.11, that you can use with or without a VPC. In this approach, the VPN connection is the hub, and the remote offices act as the spokes. In the hub-and-spoke design of CloudHub, the AWS account is the hub and the remote offices are the spokes. It is more cost-effective than multiple Direct Connect connections and is extremely useful in cases where you need a redundant...

The rest of the chapter is locked

You're reading from AWS Certified Security – Specialty (SCS-C02) Exam Guide Get all the guidance you need to pass the AWS (SCS-C02) exam on your first attempt

Table of Contents (29) Chapters

Understanding the Purpose of AWS CloudHub

Unlock this book and the full library FREE for 7 days

Authors (2)

Personalised recommendations for you