Visão Geral

Este curso apresenta a segurança do AWS IAM, abordando usuários, grupos, roles, policies, permissões, federation, workloads, privilégios e monitoramento de identidades.

Objetivo

Após realizar este curso, você será capaz de:

• Configurar IAM de forma segura
• Avaliar permissões
• Implementar least privilege
• Monitorar atividades de identidade

Publico Alvo

• AWS Administrators
• Cloud Security Professionals
• IAM Professionals
• DevOps Security Teams

Pre-Requisitos

• Conhecimentos básicos de AWS
• Familiaridade com IAM
• Conhecimentos de cloud computing
• Noções de networking
• Conhecimentos básicos de segurança

Conteúdo Programatico

Module 1: AWS IAM Fundamentals

1. AWS IAM architecture
2. Users
3. Groups
4. Roles
5. Policies
6. Permissions
7. Principals
8. Resource-based policies
9. Identity lifecycle
10. IAM security model

Module 2: IAM Policies and Permissions

1. Policy structure
2. Policy elements
3. Actions
4. Resources
5. Conditions
6. Allow and Deny
7. Policy evaluation
8. Identity-based policies
9. Resource-based policies
10. Permission analysis

Module 3: Least Privilege

1. Least privilege principles
2. Permission discovery
3. Access analysis
4. IAM Access Analyzer
5. Excessive permissions
6. Privilege escalation
7. Permission boundaries
8. Service control concepts
9. Permission governance
10. Least privilege implementation

Module 4: Roles and Workload Identity

1. IAM roles
2. Role assumption
3. Trust policies
4. EC2 instance roles
5. Lambda execution roles
6. ECS task roles
7. Cross-account roles
8. Workload identity
9. Temporary credentials
10. Role security

Module 5: Authentication Security

1. Root account security
2. MFA
3. Access keys
4. Temporary credentials
5. Federation
6. Identity providers
7. SSO concepts
8. Credential rotation
9. Authentication monitoring
10. Authentication hardening

Module 6: IAM Threats

1. Credential theft
2. Access key exposure
3. Privilege escalation
4. Policy abuse
5. Role abuse
6. Cross-account abuse
7. Persistence
8. IAM reconnaissance
9. Identity attack detection
10. IAM incident response

Module 7: Monitoring and Governance

1. CloudTrail
2. IAM activity monitoring
3. Access Analyzer
4. GuardDuty concepts
5. Security Hub concepts
6. SIEM integration
7. IAM governance
8. Access reviews
9. Security alerts
10. IAM security reporting

Module 8: Practical AWS IAM Security

1. IAM configuration assessment
2. Policy analysis
3. Privilege assessment
4. Role trust analysis
5. Access key review
6. CloudTrail investigation
7. IAM hardening
8. Monitoring implementation
9. Least privilege validation
10. AWS IAM security case studies