|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/enforcing-access-control-with-aws-iam/
课程评论:没有评论
课程名称:使用AWS IAM实施访问控制 课程概述: 该课程主要面向云安全工程师、安全分析师、身份专业人士、网络工程师、IT技术人员、系统管理员、计算机科学学生、AWS支持工程师以及任何有兴趣开始IT行业职业或转向云计算领域的人士。 学习内容: - 创建IAM用户、用户组和角色 - 通过控制台、CLI和API进行AWS身份验证 - 理解永久凭证与临时凭证的区别 - 理解全局条件键与服务特定条件键的区别 - 配置多重认证(MFA) - 理解IAM策略的结构 - 使用基于身份和基于资源的策略授予权限 - 通过服务控制策略、会话策略和权限边界限制权限 - 创建符合最小权限原则的策略 - 在AWS CLI上使用命名配置文件 - 审计AWS云中IAM实体的活动 - 设置 AWS IAM与AWS IAM身份中心之间的基于SAML的联合 - 解决与身份验证和授权相关的常见错误 - 使用策略模拟器解决复杂策略问题 - 理解AAA安全框架 - 丰富您的策略与路径和策略变量 - 处理最终一致性问题 先决条件: - 良好的网络连接 - 学习的意愿 常见问题: - 是否需要任何先前经验?虽然有AWS云的先前经验会有帮助,但并非必要。 - 本课程期间是否会产生费用?AWS IAM是免费的服务,因此只要在每个练习结束时清理资源,就不需要支付额外费用。 - 这门课程是否提供支持?是的,您提出的任何问题都会及时得到解答。 - 课程结束后会获得完成证书吗?是的,课程结束时将颁发完成证书。
Who is this course forThis course is mainly for cloud security engineers, security analysts, identity professionals, network engineers, IT technicians, system administrators, computer science students, AWS support engineers and anybody who is interested in starting a career in the IT industry or transitioning to a role in the cloud space.What you will learnHow to create IAM users, user groups and rolesHow to authenticate into AWS via the console, CLI and APIThe differences between permanent and temporary credentialsThe differences between global and service-specific condition keysHow to configure multi-factor authentication (MFA)The structure of IAM policiesHow to grant permissions using identity-based and resource-based policiesHow to restrict permissions using service control policies, session policies and permissions boundariesHow to create policies that adhere to the principle of least privilegeHow to work with named profiles on the AWS CLIHow to audit the activity of your IAM entities in the AWS cloudHow to set up SAML-based federation between AWS IAM and AWS IAM Identity CenterHow to troubleshoot common errors related to authentication and authorizationHow to troubleshoot complex policies with the policy simulatorThe AAA security frameworkHow to enrich your policies with paths and policy variablesHow to work around eventual consistencyPrerequisitesA good internet connectionA willingness to learnFAQsDo I need any previous experience?Any previous experience in the AWS cloud would be beneficial but not necessaryWill I incur any charges during this course?AWS IAM is a free service so as long as you clean up your resources at the end of every exercise you will not need to pay anything extraDo I get any support with this course?Yes, any question you have will be answered in the most timely mannerWill I get a certificate of completion at the end?Yes, a certificate of completion will be awarded at the end