Thread by @AppSecEngineer

Want to learn @awscloud Security but not sure where to start?

Here's a super-useful Learning Roadmap for AWS Security:

(Keep reading to get the full roadmap diagram👇 )
#awssecurity #cloudsecurity

Just starting out? You should learn the basics first.

Identity & Access Mgmt. is your first order of business. Understanding IAM will solve half your security problems in AWS.

Next up, Secrets in AWS! Cryptography, secure password storage, etc. are CRITICAL.

2/6

Next, go for VM & Network Security. Learn about VPC, Flow Logs & VM security.

Boost visibility in any AWS env. by monitoring & logging events with CloudWatch & CloudTrail.

Learn to automate vulnerability mgmt. with Amazon Inspector. Cut down on manual work with automation.

3/6

Done with the Basics? Time to really dive deep into AWS services:

- Serverless security
- Auditing
- ECR (Container registry)
- Athena (SQL queries)
- GuardDuty (Threat detection)
- Threat Model
- ECS & Fargate (Container orchestration)

...and more (full list below👇)

4/6

Now we're getting to the advanced stuff:

- AWS PrivateLink (connect VPCs to AWS)
- Cognito (AuthN, AuthZ, IAM)
- EKS (Managed Kubernetes)
- SSO & OIDC
- Advanced monitoring with CloudWatch Expressions, Events & Triggers

Oh, and we promised you an easy visual diagram:
5/6

Awesome diagram is courtesy of @abhaybhargav!

We've got courses for most of these topics in our AWS Security Learning Path:

☁️ 8 amazing courses
☁️ 33 hands-on labs
☁️ 30+ hours of learning
☁️ Real-world scenarios, story-driven

Here it is:
appsecengineer.com/product/aws-se…

6/6

@abhaybhargav If you enjoyed this thread, follow @AppSecEngineer and retweet us!

More like this every day.

https://twitter.com/978820200240906240/status/1600180820630724614