Learn about the Separation of Duties concept. Learn the reasons for separation of duties, and will learn techniques for how to implement Separation of Duties in your organization. Learn how to achieve Separation of Duties for your root AWS account, including the use of Multifactor Authentication
- [Instructor] Now that we understand…the AWS shared responsibility model…and breath of AWS security services,…let's explore how to configure your AWS account…in accordance with best practices.…What better place to start…than by Implementing Separation of Duties…and multi-factor authentication.…Separation of Duties is a concept that…requires more than one person to perform an action.…Implemented properly, Separation of Duties…reduces the chances of a security compromise.…Auditors love Separation of Duties and for a good reason.…
Implementing this best practice within your AWS account…will definitely get you style points…when it comes time for your annual IT audit.…In this video let's explore how to protect your account…by implementing Separation of Duties…in concert with multi-factor authentication.…When you sign up for an AWS account…and log in for the first time…you enter your email address and password.…These two items combine to make up…your root account credentials.…As the name implies, these root credentials…
Sharif Nijim couples pragmatic advice with practical examples that educate IT pros on how to create a secure infrastructure within Amazon Web Services. Sharif explores the shared responsibility model of security, which splits duties between your company and AWS, and introduces key identity and access management concepts, including users, groups, roles, and policies. Learn how to configure Identity and Access Manager (IAM) and Simple Storage Service (S3) access management, including policies and access control lists. At the end of the course, Sharif helps you prepare for the inevitable audit of your AWS account(s).
This course is also part of a series designed to help you prepare for the AWS Certified SysOps Administrator – Associate certification exam.
- The AWS shared responsibility model and security landscape
- Enabling CloudTrail
- Configuring AWS Identity and Access Management (IAM)
- Configuring IAM users, groups, and policies
- Granting temporary access
- Controlling access to Simple Storage Service (S3)
- Preparing for security audits
- Getting audit help from Trusted Advisor