AWS IAM, Accounts, and Organizations Deep Dive

• Hone your IAM skills and learn to manage users, groups, roles, and policies, including cross-account roles
• Learn how explicit and implicit denies impact your permissions, how you can pass roles to AWS services, and how to use SAML and Web Identity Federations
• Understand how to use multiple VPCs and AWS accounts to isolate resource permissions, and how to use AWS Organizations and Service Control Policies

Security knowledge is an absolute necessity for anyone who manages an AWS account. AWS IAM, Accounts, and Organizations Deep Dive is an intensive training that focuses on AWS Identity and Access Management (IAM) design, administration, and security. You gain the required skills to quickly and easily create your IAM users, groups, roles, and policies, with a focus on maximizing security using the principal of least privilege.

You start with the absolute basics and build to more advanced topics as the training progresses. Understanding the shared responsibility model, the principal of least privilege, root user vs. IAM users, and Day 1 AWS Account Security provides the foundation for IAM knowledge. You learn to configure IAM users, groups, roles, and policies.

You gain a much deeper understanding of critical IAM polices, and how policy conflicts are handled. We examine how to pass roles to AWS Services, and how to configure cross-account roles and allow the assumption of roles. You also learn how to use tools such as IAM Policy Simulator and IAM Access Analyzer to help create effective policies.

You learn about design patterns for multiple AWS Accounts and VPCs and how to manage multiple accounts using AWS Organizations. Finally, you examine Service Control Policies (SCPs) and how they can control the services available to AWS accounts.