Skip to content

AWS security for DevOps engineers

Intermediate2 sections · 6 lessons · ~3h total · 12-question self-test

01

IAM & federation

2 lessonsTest yourself

01IAM mental modelPrincipals, policies, boundaries, and evaluation order.30 min 02OIDC federation from CIGitHub/GitLab to AWS with zero stored keys.30 min

02

Guardrails, detection & IR

4 lessonsTest yourself

01Organizations and SCPsGuardrails that even account admins cannot cross.30 min 02CloudTrail and GuardDuty baselineThe two services to turn on everywhere, today.30 min 03S3 misconfiguration greatest hitsPublic buckets, ACLs, and Block Public Access.25 min 04Incident response in AWSKey compromise runbook, step by step.30 min

Final exam

Test yourself on everything

12 questions drawn from all 2 sections — every answer explained as you pick.

Start final exam