Design for Security

The who, what, when, and why of Designing for Security in the cloud.

After this lesson, you will be able to secure access for both AWS users and applications, apply security best practices such as identity federation, and fine tune least privilege access permissions.

After this lesson, you will be able to access cloud resources securely, protect against data exfiltration, ensure compliance, and configure VPC endpoints to keep traffic within your VPC.

Our goal is to minimize the risk of a malicious actor accessing our networks and servers, invoke the AWS API, and, ultimately, perform destructive or unauthorized actions in our environments.

You will identify vulnerable misconfigurations, guard against malicious activity, and design a deployment pipeline that ensures that security practices are implemented early on.

In this project, you'll put everything you learned in the course to secure a web application.