강의

멘토링

커뮤니티

BEST
Security & Network

/

Computer Security

Understanding and Securing AWS Cloud IAM in Practice

You can learn about IAM, the foundation of AWS Zero Trust, from the basics to the details. This will help you understand what parts are actually vulnerable and where you need to pay more attention.

(4.9) 35 reviews

436 learners

Level Basic

Course period Unlimited

  • rex
AWS
AWS
iam
iam
devsecops
devsecops
Terraform
Terraform
devops
devops
AWS
AWS
iam
iam
devsecops
devsecops
Terraform
Terraform
devops
devops

Reviews from Early Learners

Reviews from Early Learners

4.9

5.0

김경민

30% enrolled

This lecture is content-focused.

5.0

lim.hj

100% enrolled

It's a good class.

5.0

udin

6% enrolled

While learning and operating AWS, I think the most difficult area is IAM. I quickly understood it because it was explained in detail and easily. To be honest, I don't think there is anyone who handles IAM with this level of quality. I really recommend it.

What you will gain after the course

  • Service Control Policies (SCPs)

  • Policy for preventing credential leakage

  • Understanding IMDS and Configuring a Safe Environment

  • Understanding IRSA and Configuring a Secure Environment

  • Deep Dive into AWS IAM Overview and Policies

  • Attack and defense practices due to vulnerable policies

  • RolesAnywhere Strategy and Practical Use

Security Basics, Get Familiar with AWS IAM!

AWS Cloud Basics: IAM
Where and how should I start?

  • “Where and how should I start with IAM?”
  • “I know IMDS/IRSA works, but what do I need to configure and improve?”
  • “Can we securely integrate with on-prem without using long-term credentials?” …

In this lecture, you will learn about the most basic parts of AWS (Amazon Web Services) through IAM.

  • ✅ Understand the basics of AWS IAM and configure not only basic policies but also secure policies that fit your environment.
  • ✅ Understand how Instance MetaData Service (IMDS), IAM Roles for Service Accounts (IRSA), and Pod Identity work and learn how to securely configure your environment.
  • ✅ We will also look at vulnerabilities caused by structural problems in managed clusters and learn how to prevent them.
  • ✅ Learn about RolesAnywhere and how to use it in practice.

I recommend this to these people.

🙍‍♀️

I have AWS security but I don't know where to start or how to access it.

🙍‍♂️

I know roughly what IMDS and IRSA are, but I don't know how they work and how to handle security.

🙋‍♀️

If you want to set up a security policy but don't know what is possible or impossible with IAM

🙋‍♂️

Anyone who wants to build zero trust in an AWS environment


What you'll learn 📚

Take your understanding of IAM and service practice security to the next level!

  • 1️⃣ You will gain a fundamental understanding of IAM, learn about policy components that are easily overlooked, and be able to configure optimal policies.
  • 2️⃣ You will learn how to understand and utilize the security methods used in the huge service called AWS.
  • 3️⃣ We will think about security in other areas as well as IAM, and look at what is considered and how security is configured in practice.

1) IAM Overview and Functions

  1. User/Group/Role/Policy
  2. SCPs, JSON policy elements
  3. IAM Condition Keys and Utilization

2) IMDS (Instance MetaData Service)

  1. Understanding IMDS and How It Works
  2. IMDSv1 vs IMDSv2
  3. Proxy Server Vulnerabilities and Responses
  4. IMDSv2 Transition
  5. Configuring a Secure IMDS Environment

3) IRSA (IAM Roles for Service Accounts)

  1. Understanding IRSA and How It Works
  2. Conditions under which IRSA may become vulnerable
  3. Configuring a Secure IRSA Environment

4) BIG IAM CHALLENGE

  1. Analysis of vulnerable policies
  2. Attack by bypassing vulnerable policies

5) Structural vulnerabilities of managed clusters

  1. Describing structural vulnerabilities in managed clusters
  2. Examining how the vulnerability works

6) IAM global condition key bug

  1. Bug when accessing S3 from console
  2. Bug when accessing CloudWatch Logs from the console

7) aws-iam-gitops project

  1. Using GitLab CI/CD <-> AWS Keyless Roles
  2. DevSecOps (Shift-Left) Practice via CI
  3. Description and understanding of gitops

8) RolesAnywhere

  1. Introduction to RolesAnywhere and how it works
  2. Certificate Issuance Conditions and PCA vs ECA
  3. Usage strategies, precautions and practice

Nice to meet you, I am cloud engineer Cheon Kang-min 🙂

Hello, I am currently working as a cloud engineer at Kakao Bank. I am working on building zero-trust security that takes into account the characteristics of the business by standing on the shoulders of the giant called AWS. I am learning and experiencing knowledge from various fields to build a flexible but very strong security environment. I believe that I can further enhance my strengths by accumulating this knowledge.

I hope that through this lecture, many people will be able to increase their understanding of IAM and learn what is necessary for security.


Q&A 💬

Q. Can I learn AWS IAM in such a short lecture?

It is important to try out various services related to IAM, but more importantly, the policies that form the basis of them. Once you understand the policies and the services (IMDS/IRSA) that are frequently used, you will be able to configure and understand other functions related to IAM without much difficulty. In other words, you can think of it as containing a lot of content compared to the time.

Q. How can studying IAM help me?

If you are using AWS, IAM is at the foundation of everything. In fact, you can be much more secure with just a simple policy, and you can grant permissions much more efficiently if you learn how to find permissions. Also, by experiencing various security-related functions implemented by the giant called AWS, you can get ideas for various applications or architectures that you can implement.

Q. I don't do cloud security, can I still take the course?

This lecture is not only targeting the job of cloud security. If you use AWS, I think the most basic thing is IAM. Therefore, I think that through this lecture, you will be able to develop your own abilities as well as safer development/operation abilities.

💾 Things to note before taking the class

  • You can take the course if you have set up an AWS account and organization (optional) and have an environment where Python and Terraform can work .
  • As a prerequisite, you should know how to input commands through the terminal . In addition, it would be good to have experience using IAM-related functions (creating users, creating policies, creating roles, etc.). In addition, if you have a passion for learning IAM, that is sufficient.
  • We provide all lecture presentation materials and source code used in class.

Recommended for
these people

Who is this course right for?

  • If you want to use IMDS safely

  • If you want to understand AWS IAM

  • If you want to use IRSA safely

  • Those who want to establish an environment configuration foundation for zero trust

  • Those who do not want to use long-term credentials

Need to know before starting?

  • Python

  • Terraform

  • AWS

Hello
This is

2,491

Learners

125

Reviews

44

Answers

4.9

Rating

5

Courses

I am currently working as a Cloud Engineer (SRE) at KakaoBank. My role involves designing and providing service architectures, as well as creating, providing, or building various tools required by the organization.

Contact: 7424069@gmail.com

Curriculum

All

66 lectures ∙ (7hr 45min)

Course Materials:

Lecture resources
Published: 
Last updated: 

Reviews

All

35 reviews

4.9

35 reviews

  • scy님의 프로필 이미지
    scy

    Reviews 2

    Average Rating 4.5

    5

    100% enrolled

    • gyhong0230님의 프로필 이미지
      gyhong0230

      Reviews 1

      Average Rating 5.0

      5

      100% enrolled

      • jsc3171님의 프로필 이미지
        jsc3171

        Reviews 8

        Average Rating 5.0

        5

        100% enrolled

        • youngyoonchoi9469님의 프로필 이미지
          youngyoonchoi9469

          Reviews 6

          Average Rating 5.0

          5

          30% enrolled

          • jhun80jeong2035님의 프로필 이미지
            jhun80jeong2035

            Reviews 14

            Average Rating 5.0

            5

            30% enrolled

            $68.20

            rex's other courses

            Check out other courses by the instructor!

            Similar courses

            Explore other courses in the same field!