pro $24.99 per month
- access to all Manning books, MEAPs, liveVideos, liveProjects, and audiobooks!
- choose one free eBook per month to keep
- exclusive 50% discount on all purchases
lite $19.99 per month
- access to all Manning books, including MEAPs!
team
5, 10 or 20 seats+ for your team - learn more
Look inside
In this liveProject, you’ll leverage organizations service control policies to protect administrative and security resources in the accounts used by development teams where these teams have privileged access. Specifically, you will add automation to restrict access of local administrators (and intruders!) to any AWS CloudTrail and Amazon GuardDuty resources located in the accounts. Without these protections, the security controls we have put in place for audit, forensic analysis, and intrusion detection can be interfered with by the local administrators.
This project is designed for learning purposes and is not a complete, production-ready application or solution.
book resources
When you start your liveProject, you get full access to the following books for 90 days.
prerequisites
This liveProject series is intended for security engineers with intermediate experience in AWS and infrastructure as code. You will need to be familiar with the following:
TOOLS- Basic knowledge of *nix/bash command shell, including pipes, redirection, command substitution
- Basic knowledge of the Git version control system
- Basic hands-on experience with AWS CloudFormation
- Basic hands-on experience with the AWS CLI
- Basic knowledge of IAM and assuming cross-account IAM roles
- Intermediate knowledge of AWS accounts and AWS Organizations
- Intermediate knowledge of Python 3 programming including: lists, dicts, loops, comprehensions, functions, conditionals
- Intermediate understanding of cloud computing and the AWS platform
- Basic understanding of “infrastructure as code”
- Basic understanding of security concepts
Note: For all milestones in this project beware that it costs money to deploy AWS resources and leave them running. The costs depend upon the type of resource.
you will learn
In this liveProject, you’ll write boto to deploy and test organizations service control policies. Then you’ll fit the deployment and test execution into CodeBuild “pipelines” to allow for quick changes in production.
- Develop security control policies
- Develop and test boto code
- Invoke the IAM Policy Simulator
features
- Self-paced
- You choose the schedule and decide how much time to invest as you build your project.
- Project roadmap
- Each project is divided into several achievable steps.
- Get Help
- While within the liveProject platform, get help from other participants and our expert mentors.
- Compare with others
- For each step, compare your deliverable to the solutions by the author and other participants.
- book resources
- Get full access to select books for 90 days. Permanent access to excerpts from Manning products are also included, as well as references to other resources.
choose your plan
pro
monthly
annual
$24.99
$249.99
only $20.83 per month
- access to all Manning books, MEAPs, liveVideos, liveProjects, and audiobooks!
- choose another free product every time you renew
- choose twelve free products per year
- exclusive 50% discount on all purchases
-
![]()
Organizations Service Control Policy project for free
Organizations Service Control Policy project for free
team
monthly
annual
$49.99
$499.99
only $41.67 per month
- five seats for your team
- access to all Manning books, MEAPs, liveVideos, liveProjects, and audiobooks!
- choose another free product every time you renew
- choose twelve free products per year
- exclusive 50% discount on all purchases
-
![]()
Organizations Service Control Policy project for free
