|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/devsecops-in-aws-and-aws-security-services-asecurityguru/
课程评论：没有评论
《AWS 安全：DevSecOps 与 AWS 安全服务及 Terraform》课程 本课程全面深入地介绍了如何在 AWS 上实施 DevSecOps，并重点讲解了 AWS 的安全服务和 Terraform 的使用。课程涵盖了从基础的 AWS 安全服务到复杂的 DevSecOps 流水线构建，旨在帮助学员将安全深度集成到 DevOps 流程中。 **课程亮点：** * **DevSecOps 实践：** 学习如何在 DevOps 流水线中集成 SAST（静态应用安全测试）、DAST（动态应用安全测试）和 SCA（软件成分分析）等安全工具。 * **端到端流水线构建：** 重点教授端到端 AWS DevSecOps 流水线，通过 Java 项目示例进行实践。 * **AWS 安全服务：** 涵盖 AWS 的各种安全服务，以及如何发现和解决 AWS 配置问题。 * **基础设施即代码 (IaC)：** 教授使用 Terraform 创建 AWS 基础设施（如 EC2、Jenkins）以及使用 eksctl 创建 EKS 集群，并对 Terraform 代码进行安全扫描（如 Bridgecrew）。 * **安全工具集成：** 整合了 OWASP ZAP 进行 DAST，将 AWS CodeBuild 工件存储在 S3 存储桶中，并将 DAST 报告自动存储在 S3 中。 * **CSPM 介绍：** 引入了 Qualys TotalCloud CSPM（云安全态势管理）。 * **容器与编排：** 提供 Docker 和 Kubernetes 命令的笔记，以及示例 Dockerfile 和 Kubernetes 部署文件的 GitHub 仓库。 * **WAF 应用：** 涵盖 WAF（Web 应用程序防火墙）的正则表达式模式集。 * **最新更新：** 课程持续更新，包括针对 Gradle 项目的端到端 DevSecOps 项目作业、DevSecOps 手册文档，以及多国语言字幕支持。 **目标学员：** 本课程适合安全工程师、DevOps 工程师、SRE、QA 专业人士以及希望在安全领域求职的初学者。也适合希望提升应用开发安全性的开发者、InfoSec/AppSec 专家以及希望在安全领域获得高薪职位并紧跟市场趋势的专业人士。 **学习收获：** 学员将能够成功实施 DevOps 或 DevSecOps 流水线，并领导项目创建、构建和维护安全流水线的相关倡议。通过大量实践操作，学员将熟练运用各种安全工具和技术，提升开发效率和应用安全性。
Course Updates:v 10.0 - July 2024Added Assignment on End to End DevSecOps Project for Gradle with Solutionv 9.0 - May 2024Added DevSecOps Handbook document in Section 10v 8.0 - Nov 2023Updated course with subtitles/captions for Chinese(Simplified), German, Spanish, Indonesian, French languages.Updated course with lectures on Qualys TotalCloud CSPMv 7.0 - Feb 2023Updated course with videos on IAC security scan using Bridgecrew for Terraform codev 6.0 - Jan 2023Updated course with videos on AWS Infrastructure creation (EC2, Jenkins) using Terraform and EKS cluster using eksctlv 5.0 - July 2022Updated course with videos on End To End AWS DevSecOps Pipeline for a Java Project in Section 4v 4.0 - June 2022Updated course with notes on Docker Commands in Section 9Updated course with notes on Kubernetes Commands in Section 9Updated course with GitHub Repo for Sample Dockerfile in Section 9Updated course with GitHub Repo for Sample Kubernetes Deployment file in Section 9Update course with WAF Regular Expression Pattern Set Video lectures in Section 6v 3.0 - May 2022Updated course with newer videos on OWASP ZAP integration in AWS DevSecOps Pipeline to perform DAST in Section 3Updated course with newer videos to store AWS Code Build Artifacts in S3 buckets and store DAST reports automatically in S3Added new questions to Quizzesv 2.0 - May 2022Updated course with newer videos on AWS Cloud Security Posture Management and automatic config issue discovery in AWSAdded SCA in DevSecOps PipelineAdded new questions to Quizzesv 1.0 - April 2022Updated course with newer videos on AWS Security ServicesAdded Quizzes to the courseWho shall take this course?This AWS Security & AWS DevSecOps course is designed for Security Engineers, DevOps Engineers, SRE, QA Professionals and Freshers looking to find a job in the field of security. This is a focused AWS DevSecOps course with a special focus on integrating SAST/DAST/SCA tools in Build pipeline. This course also teaches to implement an End to End DevSecOps pipeline on AWS for a Java Project.Learn and implement security in DevOps pipeline, get Hands On experience in using Security tools & technologies. This course is for:DevelopersDevOpsSecurity EngineersAspiring professional in the Security domainQuality Assurance EngineersInfoSec/AppSec Professional DevSecOps being the hot skill, will help you to secure a high-salaried job and stay informed on the latest market trends. Why purchase this course?This is only practical hands-on course available on the internet till now.DevSecOps enables rapid application development with agility, at the same time it secures your application with automated security checks integrated within the pipeline. It helps to increase productivity and security by integrating security stages in the pipeline. Also, we have included practical examples to implement security in the DevOps pipeline through various tools. Before the end of the course, you will be able to successfully implement DevOps or DevSecOps pipeline and lead initiatives to create, build and maintain security pipelines in your project. No Action required before taking this course. For any question or concerns, Please post your comments on discussions tabDisclaimer: All Language subtitles are corrected and auto-generated so please ignore any grammar mistakes. If you feel that any lecture subtitles are incorrect, please report the same. Thanks for understanding.
