AWS Security: DevSecOps & AWS Security Services & Terraform
Cloud Security in AWS | Implement SAST, SCA and DAST in AWS DevSecOps Pipeline(Maven, Gradle) & Security Services in AWS
Lo que serás capaz de hacer
Course Updates: v 12.0 - August 2026 Fixed the SonarCloud plugin issues in buildspec.yml file in Github repos v 11.0 - June 2026 Added the latest AWS AMI details v 10.0 - July 2024 Added Assignment on End to End DevSecOps Project for Gradle with Solution v 9.0 - May 2024 Added DevSecOps Handbook document in Section 10 v 8.0 - Nov 2023 Updated course with subtitles/captions for Chinese(Simplified), German, Spanish, Indonesian, French languages. Updated course with lectures on Qualys TotalCloud CSPM v 7.0 - Feb 2023 Updated course with videos on IAC security scan using Bridgecrew for Terraform code v 6.0 - Jan 2023 Updated course with videos on AWS Infrastructure creation (EC2, Jenkins) using Terraform and EKS cluster using eksctl v 5.0 - July 2022 Updated course with videos on End To End AWS DevSecOps Pipeline for a Java Project in Section 4 v 4.0 - June 2022 Updated course with notes on Docker Commands in Section 9 Updated course with notes on Kubernetes Commands in Section 9 Updated course with GitHub Repo for Sample Dockerfile in Section 9 Updated course with GitHub Repo for Sample Kubernetes Deployment file in Section 9 Update course with WAF Regular Expression Pattern Set Video lectures in Section 6 v 3.0 - May 2022 Updated course with newer videos on OWASP ZAP integration in AWS DevSecOps Pipeline to perform DAST in Section 3 Updated course with newer videos to store AWS Code Build Artifacts in S3 buckets and store DAST reports automatically in S3 Added new questions to Quizzes v 2.0 - May 2022 Updated course with newer videos on AWS Cloud Security Posture Management and automatic config issue discovery in AWS Added SCA in DevSecOps Pipeline Added new questions to Quizzes v 1.0 - April 2022 Updated course with newer videos on AWS Security Services Added Quizzes to the course Who shall take this course? This AWS Security & AWS DevSecOps course is designed for Security Engineers, DevOps Engineers, SRE, QA Professionals and Freshers looking to find a job in the field of security. This is a focused AWS DevSecOps course with a special focus on integrating SAST/DAST/SCA tools in Build pipeline. This course also teaches to implement an End to End DevSecOps pipeline on AWS for a Java Project. Learn and implement security in DevOps pipeline, get Hands On experience in using Security tools & technologies. This course is for : Developers DevOps Security Engineers Aspiring professional in the Security domain Quality Assurance Engineers InfoSec/AppSec Professional DevSecOps being the hot skill, will help you to secure a high-salaried job and stay informed on the latest market trends. Why purchase this course? This is only practical hands-on course available on the internet till now. DevSecOps enables rapid application development with agility, at the same time it secures your application with automated security checks integrated within the pipeline. It helps to increase productivity and security by integrating security stages in the pipeline. Also, we have included practical examples to implement security in the DevOps pipeline through various tools. Before the end of the course, you will be able to successfully implement DevOps or DevSecOps pipeline and lead initiatives to create, build and maintain security pipelines in your project. No Action required before taking this course. For any question or concerns, Please post your comments on discussions tab Disclaimer : All Language subtitles are corrected and auto-generated so please ignore any grammar mistakes. If you feel that any lecture subtitles are incorrect, please report the same. Thanks for understanding.
- Learn DevSecOps implementation in AWS and various AWS Security Services
- Learn to implement End to End DevSecOps Pipeline in AWS that include SAST, DAST & SCA
- Learn AWS CodeBuild and integration with CodePipeline
- Learn AWS CodeCommit and connect with Git Bash
- Learn AWS IAM and assign inline policies to IAM roles
- Learn AWS Security and implementation of AWS Security services
Temario
UNIDAD 1 - Introduction · 2 leccionesUNIDAD 1 - Introduction
UNIDAD 1 - Introduction
- Introduction and Course Agenda
- About the Course
UNIDAD 2 - Deep Dive into DevSecOps · 4 leccionesUNIDAD 2 - Deep Dive into DevSecOps
UNIDAD 2 - Deep Dive into DevSecOps
- Basic Security Terms - If new to security field
- What is DevSecOps?
- Tools used for DevSecOps Implementation in the market - Detailed discussion
- Tools used for DevSecOps in AWS
UNIDAD 3 - Hands On - Integrating Security in AWS CI/CD Pipeline · 20 leccionesUNIDAD 3 - Hands On - Integrating Security in AWS CI/CD Pipeline
UNIDAD 3 - Hands On - Integrating Security in AWS CI/CD Pipeline
- Create AWS Free Tier Account
- Install Git on Windows Machine
- Connect Github if you do not want to use AWS CodeCommit Repositories
- Connect Git bash with AWS CodeCommit
- Knowledge Check
- Push Vulnerable application code to AWS CodeCommit using Git Bash
- What is SonarCloud and its benefits?
- Add BuildSpec YAML file in the vulnerable application to integrate SonarCloud
- Create SonarCloud Project and update BuildSpec YAML file with SonarCloud values
- Debugging Tips for lecture 16
- Create AWS Code Build project and run SAST analysis using SonarCloud
- Fix Code Coverage issues in SonarCloud for your Vulnerable application
- Important information for Lecture 19 as per recent AWS changes
- Move SonarCloud Security Token from Pipeline to AWS Secrets Manager
- Implement quality gates using Sonar
- What is OWASP ZAP and its benefits?
- Configure AWS Code Build to store security tools artifacts in S3 Buckets
- Integrate OWASP ZAP in AWS DevSecOps Pipeline using BuildSpec YAML
- Knowledge Check
- Security Engineer 1:1 discussion with Security Manager
UNIDAD 4 - Case Study: Implementing an End To End AWS DevSecOps Pipeline for a Java Project · 3 leccionesUNIDAD 4 - Case Study: Implementing an End To End AWS DevSecOps Pipeline for a Java Project
UNIDAD 4 - Case Study: Implementing an End To End AWS DevSecOps Pipeline for a Java Project
- Case Study: Understanding Project Requirements before workflow implementation
- Hands On: Write code changes to integrate SAST, SCA & DAST in DevSecOps Pipeline
- Hands On: Execute End to End AWS DevSecOps Pipeline and review logs
UNIDAD 5 - Assignment: Implement an End to End AWS DevSecOps pipeline for Gradle Project · 1 leccionesUNIDAD 5 - Assignment: Implement an End to End AWS DevSecOps pipeline for Gradle Project
UNIDAD 5 - Assignment: Implement an End to End AWS DevSecOps pipeline for Gradle Project
- Learn writing AWS DevSecOps pipeline for Gradle project (SAST, SCA, DAST)
UNIDAD 6 - Report Security issues found during SAST, SCA & DAST scans in JIRA · 5 leccionesUNIDAD 6 - Report Security issues found during SAST, SCA & DAST scans in JIRA
UNIDAD 6 - Report Security issues found during SAST, SCA & DAST scans in JIRA
- Hands On: Create JIRA account with Atlassian with custom JIRA site
- Hands On: Report SAST security issues in JIRA identified by SonarCloud
- Hands On: Report SCA security issues in JIRA identified by Snyk
- Hands On: Report DAST security issues in JIRA identified by OWASP ZAP
- Hands On: Integrate JIRA with SonarCloud to create tickets with one-click
UNIDAD 7 - Security Services in AWS · 15 leccionesUNIDAD 7 - Security Services in AWS
UNIDAD 7 - Security Services in AWS
- AWS Security Hub is now AWS Security Hub CSPM
- AWS Security Hub Basics
- Hands On: AWS Security Hub implementation
- Hands on: Amazon Detective basics and implementation
- Guard duty basics and implementation
- Hands on: Review Guard duty findings and additional features
- Hands on: Amazon IAM access analyzer basics and implementation
- Hands on: Amazon Macie basics and implementation - Part 1
- Hands on: Amazon Macie basics and implementation - Part 2
- AWS Audit Manager Basics and Implementation
- Create assessment in AWS audit manager
- Hands On: Review results of all integrations performed with Security Hub
- Hands On: Implement WAF in AWS
- Hands On: Create Regular Expression Pattern Set in AWS WAF and assign it to ACL
- Knowledge Check
UNIDAD 8 - Learn to Create AWS Infra using Terraform for DevSecOps Interview and run IAC · 15 leccionesUNIDAD 8 - Learn to Create AWS Infra using Terraform for DevSecOps Interview and run IAC
UNIDAD 8 - Learn to Create AWS Infra using Terraform for DevSecOps Interview and run IAC
- Download Terraform on Windows Machine and Configure PATH in windows machine
- Create AWS Admin User
- Install AWS CLI and Authenticate with AWS
- Install Visual Studio Code on Windows Machine
- Clone Terraform Repo On Local System
- Open the Terraform Repo in Visual Studio Code
- Understand Terraform Script to create AWS Infrastructure
- Understand shell script to install softwares on EC2 instance using Terraform
- Understand variables file in TF and create AWS Key pair to create EC2 using TF
- VPC Id for the infra creation and EC2 instance details
- Run Terraform Script to create AWS Infrastructure
- Create Kubernetes Cluster (EKS) using EKSCTL utility
- Cleanup resources created in the course using eksctl and Terraform
- Debugging: Some useful commands to fix issues during cleanup
- Knowledge Check
UNIDAD 9 - Cloud Security and Posture Management with Qualys TotalCloud · 3 leccionesUNIDAD 9 - Cloud Security and Posture Management with Qualys TotalCloud
UNIDAD 9 - Cloud Security and Posture Management with Qualys TotalCloud
- What is CSPM?
- Create an account with Qualys TotalCloud for running CSPM on AWS
- Scan AWS Infrastructure for Security Misconfiguration using Qualys Total Cloud
UNIDAD 10 - Learn Docker and Kubernetes Commands for DevSecOps Interview · 5 leccionesUNIDAD 10 - Learn Docker and Kubernetes Commands for DevSecOps Interview
UNIDAD 10 - Learn Docker and Kubernetes Commands for DevSecOps Interview
- Notes on Docker Commands
- Sample Dockerfile
- Notes on Kubernetes Commands
- Sample kubernetes Deployment file to deploy Docker container with load balancer
- Knowledge Check
UNIDAD 11 - Next Steps · 5 leccionesUNIDAD 11 - Next Steps
UNIDAD 11 - Next Steps
- Security Engineer 1:1 interview with Hiring Manager
- DevSecOps Handbook
- Application Security As a Career
- Sample DevSecOps Engineer CV
- Bonus Lecture
Tu certificado lo emite la SEP, no solo una plataforma
Al demostrar la competencia recibes un certificado emitido por la Secretaría de Educación Pública a través del Gobierno del Estado de México: un documento oficial que puedes presentar con confianza ante cualquier empleador o institución.
Tu certificado con INEC
- Lo emite la Secretaría de Educación Pública (SEP), a través del Gobierno del Estado de México
- Documento oficial con folio verificable en línea
- Lo otorga la Universidad Tecnológica Fidel Velázquez
Otras plataformas en línea
- Constancia privada emitida por la misma plataforma
- Solo acredita horas cursadas o asistencia
- Sin respaldo de una autoridad educativa
Tu itinerario, de la inscripción al certificado
- 1
Inscripción con pago único
Pagas $2,800 MXN una sola vez y entras de inmediato al curso.
- 2
Estudias a tu ritmo
11 unidades con videos, lecturas y actividades, disponibles 24/7 durante 12 meses.
- 3
Cuestionarios por unidad
6 cuestionarios para comprobar lo aprendido.
- 4
Certificado
Emitido por la SEP a través del Gobierno del Estado de México, con folio verificable.
Un certificado oficial de la SEP
Muestra · verificable por folio y QR
- Emitido por la Secretaría de Educación Pública (SEP), a través del Gobierno del Estado de México. No es una constancia privada: es un documento oficial, y ese respaldo marca la diferencia frente a otras plataformas en línea.
- Contenido impartido por A Security Guru.
- Folio y QR verificables para compartirlo con quien te contrate.
Empieza hoy, a tu ritmo
Un solo pago y acceso inmediato al curso completo durante 12 meses.
- 11 unidades · 78 lecciones · 55 h
- 12 meses de acceso
- 6 cuestionarios de evaluación
- Certificado emitido por la SEP (Gob. del Estado de México) con folio verificable
Sobre tu inscripción
¿Cómo es el pago?
Un solo pago de $2,800 MXN. No hay mensualidades ni cargos recurrentes.
¿Cuánto tiempo tengo acceso?
12 meses desde tu inscripción, 24/7, para avanzar a tu ritmo.
¿Quién imparte el contenido?
El curso es impartido por A Security Guru; INEC gestiona tu inscripción, evaluación y certificado.
¿Qué pasa cuando vence mi acceso?
Puedes renovar tu cuenta tú mismo desde la plataforma, sin trámites ni esperas.
