5, 10 or 20 seats+ for your team - learn more
In this liveProject, you’ll leverage organizations service control policies to protect administrative and security resources in the accounts used by development teams where these teams have privileged access. Specifically, you will add automation to restrict access of local administrators (and intruders!) to any AWS CloudTrail and Amazon GuardDuty resources located in the accounts. Without these protections, the security controls we have put in place for audit, forensic analysis, and intrusion detection can be interfered with by the local administrators.
This liveProject series is intended for security engineers with intermediate experience in AWS and infrastructure as code. You will need to be familiar with the following:TOOLS
Note: For all milestones in this project beware that it costs money to deploy AWS resources and leave them running. The costs depend upon the type of resource.
In this liveProject, you’ll write boto to deploy and test organizations service control policies. Then you’ll fit the deployment and test execution into CodeBuild “pipelines” to allow for quick changes in production.
geekle is based on a wordle clone.