Cloud Computing
AWS Security Specialty Practical Training
This practical course helps professionals master AWS security, IAM, logging, detection, network security, data protection, incident response, and compliance. The program connects key concepts, real use cases, risks, tools, and operational decisions so participants can apply the learning in their work environment. It can be tailored to the organization’s sector, internal systems, participant maturity, and performance objectives.
Objectives
- Understand the concepts, challenges, and use cases related to AWS security, IAM, logging, detection, network security, data protection, incident response, and compliance.
- Identify the data, systems, processes, and stakeholders required for effective implementation.
- Assess risks, limitations, governance requirements, and practical control points.
- Use methods, tools, and templates to structure analysis and decision-making.
- Translate learning into action plans, recommendations, and measurable improvement opportunities.
- Adapt the approach to the operating context, team maturity, and business objectives.
Target audience
- Cloud and infrastructure administrators
- Operations, platform, and FinOps teams
- Solution architects and cloud engineers
- IT managers responsible for cost and performance
- Cloud security and governance teams
Program outline
A clear structure for the learning journey.
Program outline
Outline points are grouped in one designed block instead of being treated as separate module cards.
Module 1: AWS Security Model, Accounts, Organizations, and Guardrails
Foundation for AWS Security Model, Accounts, Organizations, and Guardrails: application, analysis, and review points linked to the module
Terminology and decisions in AWS Security Model, Accounts, Organizations, and Guardrails: application, analysis, and review points linked to the module
Inputs required for AWS Security Model, Accounts, Organizations, and Guardrails: application, analysis, and review points linked to the module
Typical mistakes around AWS Security Model, Accounts, Organizations, and Guardrails: applied exercise and practical decision from a realistic scenario
Module 2: IAM, Roles, Policies, Permission Boundaries, and Federation
Current-state mapping for IAM, Roles, Policies, Permission Boundaries, and Federation: application, analysis, and review points linked to the module
Examples and scenarios involving IAM, Roles, Policies, Permission Boundaries, and Federation: application, analysis, and review points linked to the module
Diagnostic questions about IAM, Roles, Policies, Permission Boundaries, and Federation: application, analysis, and review points linked to the module
Evidence produced through IAM, Roles, Policies, Permission Boundaries, and Federation: applied exercise and practical decision from a realistic scenario
Module 3: Network Security, VPC Controls, WAF, Shield, and Inspection
Design considerations for Network Security, VPC Controls, WAF, Shield, and Inspection: application, analysis, and review points linked to the module
Roles and responsibilities in Network Security, VPC Controls, WAF, Shield, and Inspection: application, analysis, and review points linked to the module
Exceptions and constraints affecting Network Security, VPC Controls, WAF, Shield, and Inspection: application, analysis, and review points linked to the module
Quality checks for Network Security, VPC Controls, WAF, Shield, and Inspection: applied exercise and practical decision from a realistic scenario
Module 4: Logging, CloudTrail, GuardDuty, Security Hub, and Detective
Operating model for Logging, CloudTrail, GuardDuty, Security Hub, and Detective: application, analysis, and review points linked to the module
Tools and workflow steps in Logging, CloudTrail, GuardDuty, Security Hub, and Detective: application, analysis, and review points linked to the module
Handoffs and approvals around Logging, CloudTrail, GuardDuty, Security Hub, and Detective: application, analysis, and review points linked to the module
Escalation points in Logging, CloudTrail, GuardDuty, Security Hub, and Detective: applied exercise and practical decision from a realistic scenario
Module 5: Data Protection, KMS, Secrets Manager, and Encryption
Performance measures for Data Protection, KMS, Secrets Manager, and Encryption: application, analysis, and review points linked to the module
Review routines after Data Protection, KMS, Secrets Manager, and Encryption: application, analysis, and review points linked to the module
Improvement actions for Data Protection, KMS, Secrets Manager, and Encryption: application, analysis, and review points linked to the module
Sustaining discipline around Data Protection, KMS, Secrets Manager, and Encryption: applied exercise and practical decision from a realistic scenario
Module 6: Incident Response, Forensics, Containment, and Recovery
Advanced scenarios in Incident Response, Forensics, Containment, and Recovery: application, analysis, and review points linked to the module
Failure patterns seen in Incident Response, Forensics, Containment, and Recovery: application, analysis, and review points linked to the module
Coordination challenges during Incident Response, Forensics, Containment, and Recovery: application, analysis, and review points linked to the module
Recovery actions for Incident Response, Forensics, Containment, and Recovery: applied exercise and practical decision from a realistic scenario
Module 7: Compliance, Audit Evidence, and Automated Remediation
Governance requirements for Compliance, Audit Evidence, and Automated Remediation: application, analysis, and review points linked to the module
Data quality checks in Compliance, Audit Evidence, and Automated Remediation: application, analysis, and review points linked to the module
Risk controls related to Compliance, Audit Evidence, and Automated Remediation: application, analysis, and review points linked to the module
Value measures for Compliance, Audit Evidence, and Automated Remediation: applied exercise and practical decision from a realistic scenario
Module 8: AWS Security Scenario Workshop
Implementation planning for AWS Security Scenario Workshop: application, analysis, and review points linked to the module
Readiness questions before AWS Security Scenario Workshop: application, analysis, and review points linked to the module
Pilot design for AWS Security Scenario Workshop: application, analysis, and review points linked to the module
Lessons learned after AWS Security Scenario Workshop: applied exercise and practical decision from a realistic scenario
Materials provided
- ○ Slides used during the sessions
- ○ Group activities and practical exercises
- ○ Worksheets, checklists, and templates
- ○ Case studies relevant to the course
- ○ 4D Certificate of Completion issued by 4D Training & Consultancy
- ○ Post-course support for technical queries and guidance
Training Options
Programs can be delivered in-house, online, or in a blended format depending on your team's schedule, location, and learning objectives. When an external certificate or exam is included, certification rules and fees remain under the relevant awarding body's policies, while 4D provides the training and preparation support.
Why choose 4D
4D Training & Consultancy designs technical and professional programs around the client’s operating reality. The course can be adapted to sector requirements, internal systems, team capability, practical use cases, and the level of depth required by the audience.
Related courses
Advanced FinOps and Cloud Cost Governance
This practical course helps professionals master advanced FinOps, cloud cost governance, tagging, budgeting, rightsizing, showback, chargeback, and optimization. The program connects key concepts, real use cases, risks, tools, and operational decisions so participants can apply the learning in their work environment. It can be tailored to the organization’s sector, internal systems, participant maturity, and performance objectives.
View courseAWS Advanced Networking Specialty Practical Training
This practical course helps professionals master AWS advanced networking, VPC design, hybrid connectivity, routing, security, DNS, load balancing, and operations. The program connects key concepts, real use cases, risks, tools, and operational decisions so participants can apply the learning in their work environment. It can be tailored to the organization’s sector, internal systems, participant maturity, and performance objectives.
View courseAWS Certified Cloud Practitioner
Build a solid foundation in Amazon Web Services with our AWS Certified Cloud Practitioner Training. This beginner friendly course introduces the core concepts of AWS cloud computing, including fundamental services, basic architecture, security and compliance, pricing models, and cloud economics. Designed for individuals new to the cloud, this training equips you with the essential knowledge to understand AWS’s value proposition and confidently communicate AWS cloud benefits within your organization. By the end of this training, participants will be able to: Understand AWS cloud concepts, terminology, and core services, identify basic AWS architecture components and their use cases, explain AWS security and compliance fundamentals, describe AWS pricing, billing models, and cost management best practices, understand AWS cloud deployment models and cloud economics and prepare confidently for the AWS Certified Cloud Practitioner exam.
View course