Get in Touch
 Duration 14 hours

Course Outline

  • Overview of the Services Module
  • RADIUS Protocol
  • TACACS Protocol
  • Kerberos Authentication
  • Secure LDAP
  • LDAP and SAML Integration
  • Module Review: Authentication
  • Review of Authorization and Access Control: Identification vs. Authentication vs. Authorization
  • Personal Identification and Verification
  • Card-Based Verification
  • Username-Based Authentication
  • Common Access Tokens
  • Multifactor Authentication Cards
  • Authentication Methods: TOTP, HOTP, CHAP, PAP
  • Single Sign-On and Access Control
  • Principle of Implicit Deny
  • Trusted OS Authentication Factors
  • Authorization Mechanisms
  • Separation of Duties
  • ACLs, Mandatory Access Control, and Discretionary Access Control
  • Role-Based and Rule-Based Access Control
  • Time-of-Day Access Restrictions
  • Federation, Transitive Trust, and Authentication
  • Module Review: Account Management
  • Security Controls: Module Overview and Handling Multiple User Accounts
  • Shared Accounts and Account Policies
  • Group Policy Management
  • Password Complexity Requirements
  • Password Expiration and Recovery Procedures
  • Account Disablement and Lockout Strategies
  • Password History Tracking
  • Preventing Password Reuse
  • Password Length Standards
  • Fundamental Concepts of AWS IAM
  • Understanding AWS IAM
  • Managing Users in AWS
  • Managing Groups in AWS
  • Managing Permissions and Roles
  • Customization Options and Reporting
  • Login Configuration and Customization
  • Retrieving Credential Reports
  • Enhancing Security with AWS IAM
  • Generating Keys using AWS KMS
  • Configuring Account Password Policies
  • Enabling MFA for Accounts and Root Users
  • Best Practices for Using AWS IAM
  • Prohibition of Generic Accounts
  • Group-Based Privilege Assignment
  • User-Assigned Privileges
  • Conducting User Access Reviews
  • Implementing Continuous Monitoring

Requirements

  • There are no strict prerequisites, although a foundational understanding of AWS and cloud platforms is advantageous.

Target Audience

  • IT professionals
  • Security analysts
  • Individuals seeking to develop expertise in identity and access management

Number of participants


Price per participant

Testimonials (1)

Upcoming Courses

Related Categories