Security Governance at Scale

Course Objectives:

– Establish a landing zone with AWS Control Tower

– Configure AWS Organizations to create a multi-account environment

– Implement identity management using AWS Single Sign-On (SSO) for users and groups

– Federate access using AWS SSO

– Enforce policies using pre-packaged guardrails

– Centralize logging using AWS CloudTrail and AWS Config

– Enable cross-account security audits using AWS Identity and Access Management (IAM)

– Define workflows for provisioning accounts using AWS Service Catalog and AWS Security Hub