February 2020
Intermediate
5h 11m
English
Closed Captioning available in English, Japanese, Korean, Chinese (Simplified), Chinese (Traditional)
Overview
6+ Hours of Video Instruction
Automatically adhere to best practices by learning to run compliance as code in a Continuous Delivery process using AWS Config Rules, Amazon CloudWatch Event Rules, AWS CloudFormation, AWS CodePipeline, and AWS Lambda.
Overview
In this course, you will learn to use AWS services to define compliance as code, including AWS Config Rules, Amazon CloudWatch Event Rules, AWS CloudFormation, AWS CodePipeline, and AWS Lambda. You also learn how to use a combination of these tools to prevent, detect, and remediate noncompliant resources in your software systems. Paul Duvall has six AWS certifications, including AWS Certified DevOps Engineer Professional and AWS Certified Security – Specialty. He has architected, implemented, and managed software and systems solutions for more than 20 years. Throughout the course, you will have the opportunity to work along with Paul as he demonstrates how to automate the provisioning of these services and how to include them as part of a deployment pipeline using AWS CloudFormation and AWS CodePipeline.
About the Instructor
Paul Duvall is a founder of Stelligent and Chief AWS Evangelist at Mphasis–an AWS Premier Consulting Partner with the DevOps, Security, and Financial Services Competencies that has been implementing Continuous Delivery solutions on AWS since 2009. Paul has been an AWS Community Hero since 2016. He has six AWS certifications, including AWS Certified DevOps Engineer Professional and AWS Certified Security — Specialty. He has architected, implemented, and managed software and systems solutions for more than 20 years. He is the principal author of Continuous Integration: Improving Software Quality and Reducing Risk (Addison-Wesley, 2007), a 2008 Jolt Award Winner, and author of many other publications, including DevOps Essentials on AWS LiveLessons (Addison-Wesley, 2017). He writes for several publications including Forbes, Stelligent, and Mphasis, and hosts the "DevOps on AWS Radio" podcast.
Skill Level
Lesson 1: Automating AWS Resources
This lesson teaches the key components of AWS CloudFormation and AWS CodePipeline. You learn how to use these tools to help automate the provisioning of AWS resources and the software delivery workflows for all software assets, including security and compliance as code.
Lesson 2: Preventive Controls
This lesson teaches how to prevent infrastructure from being provisioned if there are noncompliant rules. You learn to use an open source framework called cfn_nag to prevent CloudFormation templates that have security vulnerabilities from being launched, and to run cfn_nag checks as part of a fully automated deployment pipeline.
Lesson 3: Detective Controls
This lesson teaches how to establish detective controls that discover changes to AWS infrastructure and to apply rules to determine if the resource is compliant or noncompliant. You learn to describe the AWS Config service and how to use AWS Config Rules to detect changes that violate organizational or team rules; to configure and run managed Config Rules against your AWS account; and to apply these rules by launching a CloudFormation stack.
Lesson 4: More Detective Controls
Building on Lesson 3, this lesson teaches how to apply custom rules and use CloudWatch Event to establish detective controls for determining compliancy. You learn how to describe Custom Config Rules and CloudWatch Even Rules, and how to write your own Custom Config Rule using the Rules Development Kit.
Lesson 5: Automated Remediation
This lesson teaches how to automatically respond to and fix noncompliant resources identified by your automated compliance rules. You learn to describe different ways to do automatic remediations; create an automatic remediation using CloudWatch Event Rules and Config from the Console; and run an AWS Config Rule auto remediation routine using CodePipeline, CloudFormation, and AWS Lambda.
Lesson 6: Continuous Compliance
This lesson teaches how to combine preventive, detective, and remediation controls for a complete Continuous Compliance solution. You learn to describe a workflow for the prevention, detection, and remediation of noncompliant resources; to manually provision an automatic remediation solution using Config Rules, CloudWatch Event Rules, and Lambda; and to create a continuous delivery compliance using CloudFormation and CodePipeline.
About Pearson Video Training
Pearson publishes expert-led video tutorials covering a wide selection of technology topics designed to teach you the skills you need to succeed. These professional and personal technology videos feature world-leading author instructors published by your trusted technology brands: Addison-Wesley, Cisco Press, Pearson IT Certification, Prentice Hall, Sams, and Que Topics include: IT Certification, Network Security, Cisco Technology, Programming, Web Development, Mobile Development, and more. Learn more about Pearson Video training at http://www.informit.com/video.
Automatically adhere to best practices by learning to run compliance as code in a Continuous Delivery process using AWS Config Rules, Amazon CloudWatch Event Rules, AWS CloudFormation, AWS CodePipeline, and AWS Lambda.
Overview
In this course, you will learn to use AWS services to define compliance as code, including AWS Config Rules, Amazon CloudWatch Event Rules, AWS CloudFormation, AWS CodePipeline, and AWS Lambda. You also learn how to use a combination of these tools to prevent, detect, and remediate noncompliant resources in your software systems. Paul Duvall has six AWS certifications, including AWS Certified DevOps Engineer Professional and AWS Certified Security – Specialty. He has architected, implemented, and managed software and systems solutions for more than 20 years. Throughout the course, you will have the opportunity to work along with Paul as he demonstrates how to automate the provisioning of these services and how to include them as part of a deployment pipeline using AWS CloudFormation and AWS CodePipeline.
About the Instructor
Paul Duvall is a founder of Stelligent and Chief AWS Evangelist at Mphasis–an AWS Premier Consulting Partner with the DevOps, Security, and Financial Services Competencies that has been implementing Continuous Delivery solutions on AWS since 2009. Paul has been an AWS Community Hero since 2016. He has six AWS certifications, including AWS Certified DevOps Engineer Professional and AWS Certified Security — Specialty. He has architected, implemented, and managed software and systems solutions for more than 20 years. He is the principal author of Continuous Integration: Improving Software Quality and Reducing Risk (Addison-Wesley, 2007), a 2008 Jolt Award Winner, and author of many other publications, including DevOps Essentials on AWS LiveLessons (Addison-Wesley, 2017). He writes for several publications including Forbes, Stelligent, and Mphasis, and hosts the "DevOps on AWS Radio" podcast.
Skill Level
- Intermediate to Advanced
- Apply key compliance concepts on AWS.
- Use AWS services and tools to automate compliance, including AWS CloudFormation, AWS Config Rules, AWS CodePipeline, Amazon CloudWatch Event Rules, and AWS Lambda.
- Integrate Continuous Compliance workflows for prevention, detection, and remediation into your software delivery process.
- Software developers and security and compliance professionals who want to integrate compliance into every facet of the software development and delivery process
- Professionals with a working knowledge of AWS and programming experience who want to make compliance ubiquitous across their systems
- Working knowledge of AWS (for example, 1-2+ years working with AWS)
- Knowledge of AWS CloudFormation
- Practical experience with a high-level programming experience, such as Python, Java, Node.js, etc.
Lesson 1: Automating AWS Resources
This lesson teaches the key components of AWS CloudFormation and AWS CodePipeline. You learn how to use these tools to help automate the provisioning of AWS resources and the software delivery workflows for all software assets, including security and compliance as code.
Lesson 2: Preventive Controls
This lesson teaches how to prevent infrastructure from being provisioned if there are noncompliant rules. You learn to use an open source framework called cfn_nag to prevent CloudFormation templates that have security vulnerabilities from being launched, and to run cfn_nag checks as part of a fully automated deployment pipeline.
Lesson 3: Detective Controls
This lesson teaches how to establish detective controls that discover changes to AWS infrastructure and to apply rules to determine if the resource is compliant or noncompliant. You learn to describe the AWS Config service and how to use AWS Config Rules to detect changes that violate organizational or team rules; to configure and run managed Config Rules against your AWS account; and to apply these rules by launching a CloudFormation stack.
Lesson 4: More Detective Controls
Building on Lesson 3, this lesson teaches how to apply custom rules and use CloudWatch Event to establish detective controls for determining compliancy. You learn how to describe Custom Config Rules and CloudWatch Even Rules, and how to write your own Custom Config Rule using the Rules Development Kit.
Lesson 5: Automated Remediation
This lesson teaches how to automatically respond to and fix noncompliant resources identified by your automated compliance rules. You learn to describe different ways to do automatic remediations; create an automatic remediation using CloudWatch Event Rules and Config from the Console; and run an AWS Config Rule auto remediation routine using CodePipeline, CloudFormation, and AWS Lambda.
Lesson 6: Continuous Compliance
This lesson teaches how to combine preventive, detective, and remediation controls for a complete Continuous Compliance solution. You learn to describe a workflow for the prevention, detection, and remediation of noncompliant resources; to manually provision an automatic remediation solution using Config Rules, CloudWatch Event Rules, and Lambda; and to create a continuous delivery compliance using CloudFormation and CodePipeline.
About Pearson Video Training
Pearson publishes expert-led video tutorials covering a wide selection of technology topics designed to teach you the skills you need to succeed. These professional and personal technology videos feature world-leading author instructors published by your trusted technology brands: Addison-Wesley, Cisco Press, Pearson IT Certification, Prentice Hall, Sams, and Que Topics include: IT Certification, Network Security, Cisco Technology, Programming, Web Development, Mobile Development, and more. Learn more about Pearson Video training at http://www.informit.com/video.
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Watch now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.