Registration

Register for all three workshops with the following link.

Workshop Registration

Topic Overview

AWS Control Tower is a service intended for organizations with multiple accounts and teams looking for the easiest way to set up their new multi-account AWS environment and govern at scale. Accounts created with AWS Control Tower are governed compliant with established policies.

Workshop Overview

In this three-part workshop, you will gain experience with AWS Control Tower to set up a new baseline multi-account AWS environment that is secure, well-architected, and ready to use. Additionally, explore the design choices AWS Control Tower promotes.

Workshop Objectives

• Self-guided demonstration of AWS Control Tower to set up a new baseline multi-account AWS environment.

• Review key Control Tower terms

  • Landing Zone – The overall multi-account environment that AWS Control Tower sets up.

  • Guardrails – Automated implementations of policy controls, focusing on security, compliance, and cost management.

  • Blueprints – Well-architected design patterns that are used to set up the Landing Zone.

  • Environment – An AWS account and the resources within it, configured to run an application. Users make requests (via Service Catalog) for new environments, and Control Tower uses automated workflows to provision them.

• Explore the opinionated and prescriptive elements AWS Control Tower derives from

  • The knowledge that AWS Professional Service has gained over the course of thousands of successful customer engagements

  • Recommendations are drawn from whitepapers, documentation, the Well-Architected Framework, and training.

Prerequisite

We recommend that attendees have the following prerequisites:

• Working knowledge of AWS core services, including services listed out in the course outline.

• Familiarity with AWS Organizations, AWS Identity and Access Management (IAM) (including Service Control Policies), AWS Config, AWS CloudTrail, and AWS Service Catalog.

Registration

Register for all three workshops with the following link.

Workshop Registration

Topic Overview

AWS Control Tower is a service intended for organizations with multiple accounts and teams looking for the easiest way to set up their new multi-account AWS environment and govern at scale. Accounts created with AWS Control Tower are governed compliant with established policies.

Workshop Overview

In this three-part workshop, you will gain experience with AWS Control Tower to set up a new baseline multi-account AWS environment that is secure, well-architected, and ready to use. Additionally, explore the design choices AWS Control Tower promotes.

Workshop Objectives

• Self-guided demonstration of AWS Control Tower to set up a new baseline multi-account AWS environment.

• Review key Control Tower terms

  • Landing Zone – The overall multi-account environment that AWS Control Tower sets up.

  • Guardrails – Automated implementations of policy controls, focusing on security, compliance, and cost management.

  • Blueprints – Well-architected design patterns that are used to set up the Landing Zone.

  • Environment – An AWS account and the resources within it, configured to run an application. Users make requests (via Service Catalog) for new environments, and Control Tower uses automated workflows to provision them.

• Explore the opinionated and prescriptive elements AWS Control Tower derives from

  • The knowledge that AWS Professional Service has gained over the course of thousands of successful customer engagements

  • Recommendations are drawn from whitepapers, documentation, the Well-Architected Framework, and training.

Prerequisite

We recommend that attendees have the following prerequisites:

• Working knowledge of AWS core services, including services listed out in the course outline.

• Familiarity with AWS Organizations, AWS Identity and Access Management (IAM) (including Service Control Policies), AWS Config, AWS CloudTrail, and AWS Service Catalog.

Registration

Register for all three workshops with the following link.

Workshop Registration

Topic Overview

AWS Control Tower is a service intended for organizations with multiple accounts and teams looking for the easiest way to set up their new multi-account AWS environment and govern at scale. Accounts created with AWS Control Tower are governed compliant with established policies.

Workshop Overview

In this three-part workshop, you will gain experience with AWS Control Tower to set up a new baseline multi-account AWS environment that is secure, well-architected, and ready to use. Additionally, explore the design choices AWS Control Tower promotes.

Workshop Objectives

• Self-guided demonstration of AWS Control Tower to set up a new baseline multi-account AWS environment.

• Review key Control Tower terms

  • Landing Zone – The overall multi-account environment that AWS Control Tower sets up.

  • Guardrails – Automated implementations of policy controls, focusing on security, compliance, and cost management.

  • Blueprints – Well-architected design patterns that are used to set up the Landing Zone.

  • Environment – An AWS account and the resources within it, configured to run an application. Users make requests (via Service Catalog) for new environments, and Control Tower uses automated workflows to provision them.

• Explore the opinionated and prescriptive elements AWS Control Tower derives from

  • The knowledge that AWS Professional Service has gained over the course of thousands of successful customer engagements

  • Recommendations are drawn from whitepapers, documentation, the Well-Architected Framework, and training.

Prerequisite

We recommend that attendees have the following prerequisites:

• Working knowledge of AWS core services, including services listed out in the course outline.

• Familiarity with AWS Organizations, AWS Identity and Access Management (IAM) (including Service Control Policies), AWS Config, AWS CloudTrail, and AWS Service Catalog.

Registration

Register for all three workshops with the following link.

Workshop Registration

Topic Overview

AWS Security Hub provides a view of security alerts and security posture across AWS accounts. Security Hub aggregates organize, and prioritizes security alerts, or findings, from multiple AWS services, such as Amazon GuardDuty, Amazon Inspector, Amazon Macie, AWS Identity and Access Management (IAM) Access Analyzer, AWS Systems Manager, and AWS Firewall Manager, as well as from AWS Partner Network (APN) solutions.

AWS Security Hub Automated Response and Remediation is an add-on solution that works with AWS Security Hub to provide a ready-to-deploy architecture and a library of automated playbooks. The add-on solution includes the playbook remediations for the security standards defined as part of the Center for Internet Security (CIS) AWS Foundations Benchmark v1.2.0.

Workshop Overview

In this three-part workshop, you will experience a self-guided demonstration of the deployment process and details of the technical components provided by AWS Security Hub Automated Response and Remediation. Additionally, experience the automated remediations in action.

Workshop Objectives

• Self-guided demonstration of the deployment process with AWS CloudFormation

• Understand the technical components

  • Detect ( AWS Security Hub, Amazon CloudWatch Events)

  • Ingest ( AWS Security Hub Custom Actions, Amazon CloudWatch Event Rules)

  • Remediate (Playbooks - AWS Systems Manager, AWS Lambda)

  • Log & Notify (Amazon CloudWatch Log, Amazon Simple Notification Service)

• Experience the automated response and remediation via a series of actions that break the rules defined by the Center for Internet Security (CIS) AWS Foundations Benchmark v1.2.0

Prerequisite

We recommend that attendees have the following prerequisites:

• Working knowledge of AWS core services

• Familiarity with AWS Security Hub, Amazon CloudWatch, AWS Systems Manager, AWS Lambda, and AWS SNS Notification

Registration

Register for all three workshops with the following link.

Workshop Registration

Topic Overview

AWS Security Hub provides a view of security alerts and security posture across AWS accounts. Security Hub aggregates organize, and prioritizes security alerts, or findings, from multiple AWS services, such as Amazon GuardDuty, Amazon Inspector, Amazon Macie, AWS Identity and Access Management (IAM) Access Analyzer, AWS Systems Manager, and AWS Firewall Manager, as well as from AWS Partner Network (APN) solutions.

AWS Security Hub Automated Response and Remediation is an add-on solution that works with AWS Security Hub to provide a ready-to-deploy architecture and a library of automated playbooks. The add-on solution includes the playbook remediations for the security standards defined as part of the Center for Internet Security (CIS) AWS Foundations Benchmark v1.2.0.

Workshop Overview

In this three-part workshop, you will experience a self-guided demonstration of the deployment process and details of the technical components provided by AWS Security Hub Automated Response and Remediation. Additionally, experience the automated remediations in action.

Workshop Objectives

• Self-guided demonstration of the deployment process with AWS CloudFormation

• Understand the technical components

  • Detect ( AWS Security Hub, Amazon CloudWatch Events)

  • Ingest ( AWS Security Hub Custom Actions, Amazon CloudWatch Event Rules)

  • Remediate (Playbooks - AWS Systems Manager, AWS Lambda)

  • Log & Notify (Amazon CloudWatch Log, Amazon Simple Notification Service)

• Experience the automated response and remediation via a series of actions that break the rules defined by the Center for Internet Security (CIS) AWS Foundations Benchmark v1.2.0

Prerequisite

We recommend that attendees have the following prerequisites:

• Working knowledge of AWS core services

• Familiarity with AWS Security Hub, Amazon CloudWatch, AWS Systems Manager, AWS Lambda, and AWS SNS Notification

Registration

Register for all three workshops with the following link.

Workshop Registration

Topic Overview

AWS Security Hub provides a view of security alerts and security posture across AWS accounts. Security Hub aggregates organize, and prioritizes security alerts, or findings, from multiple AWS services, such as Amazon GuardDuty, Amazon Inspector, Amazon Macie, AWS Identity and Access Management (IAM) Access Analyzer, AWS Systems Manager, and AWS Firewall Manager, as well as from AWS Partner Network (APN) solutions.

AWS Security Hub Automated Response and Remediation is an add-on solution that works with AWS Security Hub to provide a ready-to-deploy architecture and a library of automated playbooks. The add-on solution includes the playbook remediations for the security standards defined as part of the Center for Internet Security (CIS) AWS Foundations Benchmark v1.2.0.

Workshop Overview

In this three-part workshop, you will experience a self-guided demonstration of the deployment process and details of the technical components provided by AWS Security Hub Automated Response and Remediation. Additionally, experience the automated remediations in action.

Workshop Objectives

• Self-guided demonstration of the deployment process with AWS CloudFormation

• Understand the technical components

  • Detect ( AWS Security Hub, Amazon CloudWatch Events)

  • Ingest ( AWS Security Hub Custom Actions, Amazon CloudWatch Event Rules)

  • Remediate (Playbooks - AWS Systems Manager, AWS Lambda)

  • Log & Notify (Amazon CloudWatch Log, Amazon Simple Notification Service)

• Experience the automated response and remediation via a series of actions that break the rules defined by the Center for Internet Security (CIS) AWS Foundations Benchmark v1.2.0

Prerequisite

We recommend that attendees have the following prerequisites:

• Working knowledge of AWS core services

• Familiarity with AWS Security Hub, Amazon CloudWatch, AWS Systems Manager, AWS Lambda, and AWS SNS Notification

Registration

Register for all three workshops with the following link.

Workshop Registration

Topic Overview

Log analysis is the process of reviewing, interpreting, and understanding computer-generated records called logs. Logs provide visibility into an application and infrastructure stack's health and performance, enabling development teams and system administrators to diagnose and rectify issues quickly.

Data visualization is the graphical representation of information and data. Using visual elements like charts, graphs, and maps, data visualization tools provide an accessible way to see and understand trends, outliers, and data patterns.

Workshop Overview

In this three-part AWS Logs Visualization with Kibana workshop, the workshop will present you with ways to effectively analyze log data to gain visibility into an application's health and performance, AWS services infrastructure stack via an operational reference architecture and application. The reference architecture and application include networking services, load balancer, database, cache, Docker containers, Lambda functions, etc.

The workshop will provide you a lab kit with step-by-step instructions on how to ingest data from the different layers of an AWS infrastructure, including the application logs and how to visualize and correlate these events with Kibana to obtain a clear picture of one’s AWS infrastructure.

Workshop Objectives

• Learn how to ship and analyze logs of applications running on Docker containers, AWS Lambda functions, etc.

• How to ship and analyze and infrastructure log from ELB, CloudTrail, VPC, S3, CloudFront access logs, AWS WAF logs, API Gateway Access Logs, Amazon GuardDuty findings, etc.

• Stream CloudWatch log events to Elasticsearch

• Create Kibana visualizations and dashboards to monitor the state of your AWS infrastructure

Prerequisite

We recommend that attendees have the following prerequisites:

• Good working knowledge of the AWS platform and general understanding of audit and access logs.

• Familiarity with the Linux operating system and command-line interface.

Registration

Register for all three workshops with the following link.

Workshop Registration

Topic Overview

Log analysis is the process of reviewing, interpreting, and understanding computer-generated records called logs. Logs provide visibility into an application and infrastructure stack's health and performance, enabling development teams and system administrators to diagnose and rectify issues quickly.

Data visualization is the graphical representation of information and data. Using visual elements like charts, graphs, and maps, data visualization tools provide an accessible way to see and understand trends, outliers, and data patterns.

Workshop Overview

In this three-part AWS Logs Visualization with Kibana workshop, the workshop will present you with ways to effectively analyze log data to gain visibility into an application's health and performance, AWS services infrastructure stack via an operational reference architecture and application. The reference architecture and application include networking services, load balancer, database, cache, Docker containers, Lambda functions, etc.

The workshop will provide you a lab kit with step-by-step instructions on how to ingest data from the different layers of an AWS infrastructure, including the application logs and how to visualize and correlate these events with Kibana to obtain a clear picture of one’s AWS infrastructure.

Workshop Objectives

• Learn how to ship and analyze logs of applications running on Docker containers, AWS Lambda functions, etc.

• How to ship and analyze and infrastructure log from ELB, CloudTrail, VPC, S3, CloudFront access logs, AWS WAF logs, API Gateway Access Logs, Amazon GuardDuty findings, etc.

• Stream CloudWatch log events to Elasticsearch

• Create Kibana visualizations and dashboards to monitor the state of your AWS infrastructure

Prerequisite

We recommend that attendees have the following prerequisites:

• Good working knowledge of the AWS platform and general understanding of audit and access logs.

• Familiarity with the Linux operating system and command-line interface.

Registration

Register for all three workshops with the following link.

Workshop Registration

Topic Overview

Log analysis is the process of reviewing, interpreting, and understanding computer-generated records called logs. Logs provide visibility into an application and infrastructure stack's health and performance, enabling development teams and system administrators to diagnose and rectify issues quickly.

Data visualization is the graphical representation of information and data. Using visual elements like charts, graphs, and maps, data visualization tools provide an accessible way to see and understand trends, outliers, and data patterns.

Workshop Overview

In this three-part AWS Logs Visualization with Kibana workshop, the workshop will present you with ways to effectively analyze log data to gain visibility into an application's health and performance, AWS services infrastructure stack via an operational reference architecture and application. The reference architecture and application include networking services, load balancer, database, cache, Docker containers, Lambda functions, etc.

The workshop will provide you a lab kit with step-by-step instructions on how to ingest data from the different layers of an AWS infrastructure, including the application logs and how to visualize and correlate these events with Kibana to obtain a clear picture of one’s AWS infrastructure.

Workshop Objectives

• Learn how to ship and analyze logs of applications running on Docker containers, AWS Lambda functions, etc.

• How to ship and analyze and infrastructure log from ELB, CloudTrail, VPC, S3, CloudFront access logs, AWS WAF logs, API Gateway Access Logs, Amazon GuardDuty findings, etc.

• Stream CloudWatch log events to Elasticsearch

• Create Kibana visualizations and dashboards to monitor the state of your AWS infrastructure

Prerequisite

We recommend that attendees have the following prerequisites:

• Good working knowledge of the AWS platform and general understanding of audit and access logs.

• Familiarity with the Linux operating system and command-line interface.

Registration

Register for all three workshops with the following link.

Workshop Registration

Topic Overview

Managing AWS environments manually is complex and fault-prone, but describing an infrastructure in code improves quality and saves costs. AWS CloudFormation provides a way to model a collection of related AWS and third-party resources, provision them quickly and consistently, and manage them throughout their lifecycles by treating infrastructure as code.

Workshop Overview

In this three-part workshop, you will be exposed to AWS CloudFormation to automate the provisioning of an AWS infrastructure to support a serverless application built with AWS Lambda, Amazon API Gateway, and RDS Aurora.

Workshop Objectives

• Infrastructure as code primer and benefits of AWS Cloudformation.

• Explore the anatomy of CloudFormation and the structure of templates.

• Write reusable CloudFormation templates to provision the serverless application.

• Understand the creation and use of nested templates and the use of parameters and mapping in templates.

• Update and delete CloudFormation Stacks.

• Best practices to leverage AWS CloudFormation more effectively and securely.

Prerequisite

We recommend that attendees have the following prerequisites:

• Some Information technology background.

• Familiarity with Amazon Web Services and its core services.

• Familiarity with YAML.

• Requires a laptop to complete lab exercises – tablets are not appropriate.

Registration

Register for all three workshops with the following link.

Workshop Registration

Topic Overview

Managing AWS environments manually is complex and fault-prone, but describing an infrastructure in code improves quality and saves costs. AWS CloudFormation provides a way to model a collection of related AWS and third-party resources, provision them quickly and consistently, and manage them throughout their lifecycles by treating infrastructure as code.

Workshop Overview

In this three-part workshop, you will be exposed to AWS CloudFormation to automate the provisioning of an AWS infrastructure to support a serverless application built with AWS Lambda, Amazon API Gateway, and RDS Aurora.

Workshop Objectives

• Infrastructure as code primer and benefits of AWS Cloudformation.

• Explore the anatomy of CloudFormation and the structure of templates.

• Write reusable CloudFormation templates to provision the serverless application.

• Understand the creation and use of nested templates and the use of parameters and mapping in templates.

• Update and delete CloudFormation Stacks.

• Best practices to leverage AWS CloudFormation more effectively and securely.

Prerequisite

We recommend that attendees have the following prerequisites:

• Some Information technology background.

• Familiarity with Amazon Web Services and its core services.

• Familiarity with YAML.

• Requires a laptop to complete lab exercises – tablets are not appropriate.

Registration

Register for all three workshops with the following link.

Workshop Registration

Topic Overview

Managing AWS environments manually is complex and fault-prone, but describing an infrastructure in code improves quality and saves costs. AWS CloudFormation provides a way to model a collection of related AWS and third-party resources, provision them quickly and consistently, and manage them throughout their lifecycles by treating infrastructure as code.

Workshop Overview

In this three-part workshop, you will be exposed to AWS CloudFormation to automate the provisioning of an AWS infrastructure to support a serverless application built with AWS Lambda, Amazon API Gateway, and RDS Aurora.

Workshop Objectives

• Infrastructure as code primer and benefits of AWS Cloudformation.

• Explore the anatomy of CloudFormation and the structure of templates.

• Write reusable CloudFormation templates to provision the serverless application.

• Understand the creation and use of nested templates and the use of parameters and mapping in templates.

• Update and delete CloudFormation Stacks.

• Best practices to leverage AWS CloudFormation more effectively and securely.

Prerequisite

We recommend that attendees have the following prerequisites:

• Some Information technology background.

• Familiarity with Amazon Web Services and its core services.

• Familiarity with YAML.

• Requires a laptop to complete lab exercises – tablets are not appropriate.

Registration

Register for all three workshops with the following link.

Workshop Registration

Topic Overview

AWS Identity and Access Management (IAM) enables you to manage access to AWS services and resources securely. Using IAM, you can create and manage AWS users and groups and use permissions to allow/deny their access to AWS resources.

Workshop Overview

In this three-part workshop, you will be exposed to AWS Identity and Access Management (IAM), learn the techniques to secure a serverless application built with AWS Lambda, Amazon API Gateway, and RDS Aurora. Additionally, manage a company’s staff access to AWS resources depending on their job function.

Workshop Objectives

• Root-account management

• Manage IAM Users and their access

• Manage IAM Roles and their permissions

• Manage federated users and their access

• Secure a serverless application

Prerequisite

We recommend that attendees have the following prerequisites:

• Some Information technology background

• Familiarity with Amazon Web Services and its core services

• Requires a laptop to complete lab exercises – tablets are not appropriate

Registration

Register for all three workshops with the following link.

Workshop Registration

Topic Overview

AWS Identity and Access Management (IAM) enables you to manage access to AWS services and resources securely. Using IAM, you can create and manage AWS users and groups and use permissions to allow/deny their access to AWS resources.

Workshop Overview

In this three-part workshop, you will be exposed to AWS Identity and Access Management (IAM), learn the techniques to secure a serverless application built with AWS Lambda, Amazon API Gateway, and RDS Aurora. Additionally, manage a company’s staff access to AWS resources depending on their job function.

Workshop Objectives

• Root-account management

• Manage IAM Users and their access

• Manage IAM Roles and their permissions

• Manage federated users and their access

• Secure a serverless application

Prerequisite

We recommend that attendees have the following prerequisites:

• Some Information technology background

• Familiarity with Amazon Web Services and its core services

• Requires a laptop to complete lab exercises – tablets are not appropriate.

Registration

Register for all three workshops with the following link.

Workshop Registration

Topic Overview

AWS Identity and Access Management (IAM) enables you to manage access to AWS services and resources securely. Using IAM, you can create and manage AWS users and groups and use permissions to allow/deny their access to AWS resources.

Workshop Overview

In this three-part workshop, you will be exposed to AWS Identity and Access Management (IAM), learn the techniques to secure a serverless application built with AWS Lambda, Amazon API Gateway, and RDS Aurora. Additionally, manage a company’s staff access to AWS resources depending on their job function.

Workshop Objectives

• Root-account management

• Manage IAM Users and their access

• Manage IAM Roles and their permissions

• Manage federated users and their access

• Secure a serverless application

Prerequisite

We recommend that attendees have the following prerequisites:

• Some Information technology background

• Familiarity with Amazon Web Services and its core services

• Requires a laptop to complete lab exercises – tablets are not appropriate.