SEC480: Cyber Security Training at SANS Stay Sharp: Jan 2025

What You Will Learn
Build In Security From the Start

SEC480: AWS Secure Builder addresses eight critical risk areas, providing students with the skills and knowledge to enable enterprises to securely move workloads to AWS. By completing this course, participants will be well-equipped to implement and enhance security controls, leading to immediate improvements in security and business enablement. With this training, organizations can be confident in their teams' ability to adopt, build, and deploy in the cloud without overburdening security teams.

This training is designed to scale across enterprise engineering and development teams, making a swift and significant impact on the security of AWS workloads.
Business Takeaways

• Facilitate scalable security solutions across your organization
• Increase customer trust and satisfaction
• Strengthen organizational security posture
• Boost employee confidence and skillset in secure AWS development
• Improve compliance with cloud security standards
• Enhance business agility through secure cloud practices
• Reduce the workload and stress on your security team

Skills Learned

• Implement industry-standard security best practices in AWS workloads
• Master AWS Identity and Access Management (IAM) including roles, policies, and permissions for secure access control
• Evaluate and assess AWS services based on security documentation, controls, and audit risks
• Monitor and respond to security incidents using AWS security tools for detection, response, and mitigation
• Automate security processes with AWS services like AWS Lambda and AWS GuardDuty
• Identify security deficiencies in Continuous Integration Continuous Delivery (CICD) pipelines and detect gaps in current cloud security practices
• Secure data in transit and at rest using encryption and other protective measures
• Conduct comprehensive security audits and assessments to ensure compliance and risk identification
• Ensure AWS deployments meet industry standards and regulatory requirements
• Develop and implement incident response plans tailored to AWS environments
• Continuously optimize your security posture with regular reviews and updates

Hands-On AWS Cloud Security Training

The SEC480 lab environment immerses students in practical, real-world AWS scenarios, allowing them to apply the theory and skills learned throughout the course. Each student will receive a SANS-provisioned AWS account and a detailed lab workbook, ensuring consistent, repeatable, and relevant hands-on experience.

This dynamic lab environment includes essential cloud resources such as IAM privileges, virtual machines, security tools, and AWS services pre-installed and configured to simulate real-world scenarios. This setup allows students to focus on the most important parts of the lab, without worrying about setting up a complex environment. Each of the eight labs focuses on different aspects of AWS security, runs approximately 15 minutes each, and is designed to be clear, insightful, and easy to follow.
Syllabus Summary

• Module 1: Responsibility To, For, and Of Security
• Module 2: Identification and Authorization
• Module 3: Continuous Integration Continuous Delivery (CICD)
• Module 4: Workload and Service Hardening
• Module 5: Security Monitoring
• Module 6: Exposure and Attack Vectors
• Module 7: Incident Response
• Module 8: Trust, Control, and the Supply Chain

What You Will Receive

• MP3 audio files of the complete course lectures
• Electronic courseware

The labs in SEC480 engage the student in all of the following AWS services:

• Application Load Balancer
• CloudShell
• CloudTrail
• CloudWatch
• CodeBuild
• CodePipeline
• Cognito
• EC2
• Elastic Container Repository
• Elastic Container Service
• GuardDuty
• IAM
• Inspector
• Key Management Service (KMS)
• Relational Database Service (RDS)
• S3
• SecretsManager
• Simple Storage Service (S3)
• VPC FlowLogs
• Web Application Firewall