October 2024
Intermediate to advanced
396 pages
11h 44m
Spanish
Content preview from Seguridad y arquitectura de microservicios en AWS
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Apéndice D. Ejemplo Práctico de Aplicación del Principio del Mínimo Privilegio
En este apéndice, intentaré mostrarte un ejemplo práctico de cómo los profesionales de la seguridad pueden aplicar el principio del mínimo privilegio (PoLP) para crear políticas de Gestión de Identidad y Acceso (IAM) en AWS. En el Capítulo 2 se habló extensamente de PoLP, pero como recordatorio, el propósito de PoLP es garantizar que cada principal (un usuario de AWS o rol de AWS) dentro de una organización obtenga sólo los privilegios de acceso mínimos que necesita para realizar su trabajo y nada más. El acceso se controla en AWS mediante políticas IAM. Cada política IAM de una cuenta debe servir a un propósito específico y existir independientemente del principal al que esté vinculada.
Consideremos una organización típica que tiene muchos departamentos. En este ejemplo, quiero permitir que los empleados del departamento financiero accedan a los objetos de un determinado bucket de Amazon Simple Storage Service (Amazon S3) dentro de la cuenta de la organización. Como administrador de seguridad responsable, quiero asegurarme de que aplico la PoLP al definir las políticas de acceso para los principales (usuarios o roles) dentro de mi organización.
Por lo tanto, para garantizar el acceso, haré cumplir las siguientes condiciones:
El principal al que se adjunta esta política debe tener la etiqueta AWS departamento establecida en finanzas. En otras palabras, quiero asegurarme de que el principal (el usuario ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.