Securing Amazon Web Services

By Jay Schulman

Welcome to the complete guide to securing Amazon Web Services. As I was researching how to secure my AWS resources, I realized there isn't a one-stop guide for securing every piece of AWS. I've compiled from around the web (including great resources from Amazon, Evident.io, and others) to build this guide.
This guide will be updated as new services arise, configuration changes occur, or other things happen that require an update to the guide.

For more information about Jay and growing your security career, go to JaySchulman.com.

• Language: English
• Publisher: Jay Schulman
• Release date: Dec 15, 2015
• ISBN: 9781311794987

Jay Schulman

Hi, I'm Jay Schulman. I'm an information security consultant living in Chicago. I like to talk. But when no one's listening, I write. Useless Things You Should Know About Me: - I've never lived outside the state of Illinois. - But I've traveled to 48 out of 50 states. (Montana and Hawaii are on the bucket list.) - I fly so much on Southwest Airlines that my wife can fly free with me wherever I go. - Unfortunately I haven't reached the point where my two kids can also fly free. - In 1999, the FBI said they didn't need someone with my skills. - Also in 1999, Playboy said they needed my skills. Security skills, that is. - I turned them down to work for KPMG. - It worked out ok. 10 years employment. They found me my wife. And how to be a great manager. - And great examples of how not to manage people. My Day Job: I help security teams develop their information security programs and capabilities. I help CISOs, CIOs and CFOs understand and react to enterprise security risks and protect against attacks. I want to build information security organizations which enable the business. Information Security shouldn't be about saying "no" but about finding a way to get to "yes." I believe in strong security processes supported by a well lead team and strategic security technologies.

Book preview

Securing Amazon Web Services

The All-in-One Guide to Securing The Different Services that make up AWS

Jay Schulman

Securing Amazon Web Services

Copyright © 2015 by Jay Schulman.

Smashwords Edition

All rights reserved. Printed in the United States of America. No part of this book may be used or reproduced in any manner whatsoever without written permission except in the case of brief quotations em- bodied in critical articles or reviews.

This book is based upon data available at the time of writing and may not have been tested in a production environment. Test all changes to your environment before implementing.

For information: JaySchulman.com

First Edition: December 2015

Table of Contents

Securing Amazon Web Services

Securing the AWS Account

Amazon S3 Security

Amazon EC2 Security

Amazon RDS Security

AWS CloudTrail

AWS CloudWatch

AWS EBS

Amazon Route 53

ELB Security

CloudFront Security

Amazon VPC Security

Other Tools to Consider

Securing Amazon Web Services

The All in One Guide

Welcome to the complete guide to securing Amazon Web Services. As I was researching how to secure