AWS Secure Builder
This AWS security course for Canada based builders takes the platform from the seat of the person shipping it. You write identity and access management (IAM) policies, segment virtual private clouds, and put encryption keys under real control.
Every session runs live with an AWS account open beside you. You finish with preventative guardrails, a hardened deployment pipeline, and a repeatable way to show a workload is safe before it reaches production.
- Duration
- 6 weeks
- Format
- Live online, instructor-led
- Prerequisites
- None required
- Class size
- Capped at 12 learners
What you will be able to do
- Write least privilege IAM policies and read a policy evaluation result correctly
- Design a VPC with subnet tiers, security groups and flow log coverage
- Configure KMS keys, key policies and rotation for data at rest
- Block public S3 exposure with account level and bucket level controls
- Apply service control policies that prevent unsafe actions across accounts
- Add secret scanning, image scanning and policy checks to a CI/CD pipeline
- Turn on CloudTrail, Config and GuardDuty and route findings somewhere useful
Course outline
6 modules
- IAM users, roles, policies and the policy evaluation order
- Least privilege in practice and how to shrink an over wide role
- Cross account access and role assumption patterns
- AWS Organizations, service control policies and permission boundaries
- MFA, federation and short lived credentials
What you need before you start
- Comfort with the Linux command line and basic networking
- Some prior exposure to AWS, even at a hobby project level
- An AWS account you can create resources in, or willingness to open a free tier account
- A machine that can run the AWS CLI and a code editor
Who this course is for
- Cloud engineers and DevOps engineers who own AWS workloads
- Software developers deploying to AWS who want to secure their own stack
- Security analysts moving from on premises into cloud work
- Solutions architects who need a defensible AWS design
- Sysadmins responsible for an AWS estate that has grown faster than its controls
Where this leads
Prepares you for
AWS Certified Security - Specialty
Awarded by Amazon Web Services
The course covers the domains tested by the AWS Certified Security Specialty exam. Amazon Web Services awards that certification directly, not this academy. You register and sit the exam with AWS on your own schedule.
Questions about this course
More in cloud security
CoreCloud Security Essentials
Foundational cloud security training in Toronto covering AWS, Azure and GCP: shared responsibility, identity, network controls, logging and posture management.
8 weeks · live online
Contact for pricingView outline
CoreCloud Security Tactical Defence
Cloud incident response training in Toronto: detect, contain and harden cloud environments under real attacker pressure rather than in theory.
8 weeks · live online
Contact for pricingView outline
CoreCloud Threat Detection
Cloud threat detection training in Toronto: analyse CloudTrail, Azure Activity and GCP audit logs and engineer detections for cloud attacker techniques.
8 weeks · live online
Contact for pricingView outline
Ready to launch your cyber security career?
Join the next live online cohort. No experience required, just bring the curiosity.