Home

Welcome to the Continuous Encryption on AWS Workshop.

• Introduction
• The Current State of Encryption
• Setup Development Environment
• Lesson 1: Automating AWS Resources
  • Learning objectives
  • 1.1 AWS CloudFormation
  • 1.2 AWS CodePipeline
  • 1.3 Launch a deployment pipeline stack
• Lesson 1 Quiz
• Lesson 2: Key Management
  • Learning objectives
  • 2.1 Create KMS Keys in Console
  • 2.2 Create a Customer-Managed CMK using AWS CloudFormation
  • Lesson 2 Quiz
• Lesson 3: Developing with Encryption
  • Learning objectives
  • 3.1 AWS Encryption SDK
  • 3.2 AWS Secrets Manager
  • Lesson 3 Quiz
• Lesson 4: Encryption in Transit
  • Learning objectives
  • 4.1 AWS Certificate Manager and Amazon CloudFront in Console
  • 4.2 Launch Encryption in Transit solution with AWS CloudFormation and AWS CodePipeline
  • Lesson 4 Quiz
• Q&A (5 min)
• Break (10 min)
• Lesson 5: Encryption at Rest
  • Learning objectives
  • 5.1 Encryption at rest for AWS EBS, Amazon RDS, Amazon DynamoDB, and Amazon S3
  • 5.2 Encrypt a DynamoDB database using AWS CloudFormation
  • Lesson 5 Quiz
• Lesson 6: Detecting Encrypted Resources
  • Learning objectives
  • 6.1 Create AWS Config Rules and Amazon CloudWatch Event Rules in Console
  • 6.2 Launch a Managed Config Rule and CloudWatch Event Rule via AWS CloudFormation
  • Lesson 6 Quiz
• Q&A (5 min)
• Break (10 min)
• Lesson 7: Logging Key Usage
  • Learning objectives
  • 7.1 Create an AWS CloudTrail log in Console
  • 7.2 Provision a CloudTrail log in CloudFormation and view the JSON payload
  • Lesson 7 Quiz
• Lesson 8: Continuous Encryption
  • Learning objectives
  • 8.1 Manually create encryption prevention, detection, and remediation workflow in Console
  • 8.2 Deployment pipeline for encryption prevention, detection, and remediation workflow in CloudFormation
  • Lesson 8 Quiz
• Summary & Q&A