AWS Certified Security - Specialty

Book excerpt: AWS Certified Security - Specialty is one of the newest certifications launched by AWS and has gained a tremendous amount of popularity in the industry. This exam assesses the ability of experienced cloud security professionals to validate their knowledge on securing the AWS environments. The Security Specialty certification exam covers a wide range of topics which a Security professional would deal with, ranging from Incident response, security logging and monitoring, infrastructure security, identity and access management and data protection. This book acts as a detailed, dedicated study guide for those aiming to give the security specialty certification as well as for those who intend to master the security aspect of AWS. The book is based on the popular video course by Zeal Vora for the AWS Certified Security - Specialty certification and this book acts a standalone guide by itself as well as a supplement for those who have studied through the video course. Things you will learn: Understanding Incident Response process in Cloud environments. Implement Vulnerability Assessment & Patch Management activities with tools like Inspect and EC2 Systems Manager. Understanding stateful and stateless packet inspections firewalls. Implementing AWS WAF, Bastion Hosts, IPSec Tunnels, Guard Duty and others. Implement Centralized Control with AWS Organizations, Federations, Delegations. Understanding data-protection mechanisms with various techniques including KMS Envelope encryptions, ACM, and others. Important exam preparation pointers and review questions. Practical knowledge of AWS security services and features to provide a secure production environment.