Home

Welcome to the Continuous Encryption on AWS Workshop.

Encryption In Transit (15 min) About encryption in transit for AWS Certificate Manager, Amazon CloudFront, and Elastic Load Balancing Exercise: Launch a website using Amazon CloudFront and AWS Certificate Manager Q&A (5 min)

Break (10 min)

Encryption At Rest (20 min)

About Exercise:

Key Management (25 min)

About AWS KMS Exercise: Create a customer-managed customer master key using AWS CloudFormation Detecting Encrypted Resources (20 min)

About AWS Config Rules Exercise: Launch a Managed Config Rule via AWS CloudFormation Q&A (5 min)

Break (10 min)

Logging Key Usage (20 min)

About AWS CloudTrail Exercise: Provision a CloudTrail log and view the JSON payload Continuous Encryption (25 min)

About AWS CodePipeline Exercise: Deployment pipeline for encryption detection and remediation workflow Summary and Q&A (15 min)

• Introduction - 10 mins
• The Current State of Encryption- 5 mins
• Setup Development Environment - 10 mins
• Lesson 1: Automating AWS Resources - 20 mins
  • Learning objectives - 1 min
  • 1.1 AWS CloudFormation - 12 mins
  • 1.2 AWS CodePipeline - 12 mins
  • 1.3 Launch a deployment pipeline stack - 15 mins
• Lesson 1 Quiz - 2 mins
• Lesson 2: Developing with Encryption - 20 mins
  • Learning objectives - 1 min
  • 2.1 AWS Encryption SDK and AWS Secrets Manager - 10 mins
  • 2.2 Perform client-side encryption - 8 mins
  • Lesson 2 Quiz - 2 mins
• Lesson 3: Encryption in Transit - 15 mins
  • Learning objectives - 1 min
  • 3.1 Encryption in transit for AWS Certificate Manager, Amazon CloudFront, and Elastic Load Balancing - 8 mins
  • 3.2 Launch a website using Amazon CloudFront and AWS Certificate Manager - 8 mins
  • Lesson 3 Quiz - 2 mins
• Q&A (5 min)
• Break (10 min)
• Lesson 4: Encryption at Rest - 20 mins
  • Learning objectives - 1 min
  • 4.1 Encryption at rest for AWS EBS, Amazon RDS, Amazon DynamoDB, and Amazon S3 - 8 mins
  • 4.2 Encrypt a DynamoDB database using AWS CloudFormation - 8 mins
  • Lesson 4 Quiz - 2 mins
• Lesson 5: Key Management - 25 mins
  • Learning objectives - 1 min
  • 5.1 About AWS KMS - 6 mins
  • 5.2 Create a customer-managed customer master key using AWS CloudFormation - 12 mins
  • Lesson 5 Quiz - 2 mins
• Lesson 6: Detecting Encrypted Resources - 36 mins
  • Learning objectives - 1 min
  • 6.1 About AWS Config Rules and Amazon CloudWatch Event Rules - 8 mins
  • 6.2 Launch a Managed Config Rule and CloudWatch Event Rule via AWS CloudFormation - 10 mins
  • Lesson 6 Quiz - 2 mins
• Q&A (5 min)
• Break (10 min)
• Lesson 7: Logging Key Usage - 20 mins
  • Learning objectives - 1 min
  • 7.1 About AWS CloudTrail - 8 mins
  • 7.2 Provision a CloudTrail log and view the JSON payload - 10 mins
  • Lesson 7 Quiz - 2 mins
• Lesson 8: Continuous Encryption - 25 mins
  • Learning objectives - 1 min
  • 8.1 Deployment pipeline for encryption prevention, detection and remediation workflow - 10 mins
  • Lesson 8 Quiz - 2 mins
• Summary - 3 mins