AWS Security Handbook

AWS has revolutionized the technology landscape by providing on-demand and pay-as-you-go IT services. Builders can experiment at unprecedented scale and speed, delivering innovative business outcomes and enhanced value to customers. Businesses are moving more of their applications to AWS to take advantage of the cloud.

The book begins with strategic design, detailing governance and building a strong AWS Organization security architecture. You will learn about the various AWS security services, features, and best practices gathered from the author’s years of experience implementing enterprise-grade security. Learn what constitutes a great security culture and why it is so critical for an organisation to succeed. Understand the AWS Shared Responsibility Model and how AWS helps you meet your part of the responsibility. Then look into how to build a good security architecture on AWS and learn how you can build around five primary domains of AWS security - identity and access management, infrastructure security, data protection, vulnerability management, and incident response.

By the end of this book, you will possess the comprehensive technical and operational knowledge to confidently design, manage, and continuously improve a high-security, resilient AWS program aligned with business objectives.

WHAT YOU WILL LEARN
● Understand the shared responsibility model and deploy a security champions program.
● Design security governance and structure a secure AWS Organization architecture.
● AWS security services, features, and best practices.
● Manage data classification, encryption, and PKI across the data lifecycle.
● Practical guidance to build enterprise-grade security with hands-on learning.
● New trends and technologies impacting AWS security.
● Build incident response plans and improve automation through the control cycle.

WHO THIS BOOK IS FOR
This book is for professionals, including security leaders, architects, engineers, and cloud platform engineers responsible for the security of their organizations. This book will also help students with no prior AWS working experience be job-ready by providing practical knowledge of different aspects of AWS security.

1. Security the Enabler
2. Designing for Security
3. Identity and Access Management
4. Infrastructure Protection
5. Data Protection
6. Threat Detection
7. Vulnerability Management
8. Incident Response
9. CI/CD Security
10. AWS Security Best Practices and Future Trends

Avik Mukherjee is a seasoned cybersecurity leader and senior cloud security architect with over 15 years of experience helping organizations securely adopt cloud technologies and safeguard their digital transformations. He helps organizations build and implement a multi- year cloud security management strategy, making security the enabler for their developers to innovate and take full advantage of the cloud. His contribution extends beyond technical aspects, helping build a security mindset and relevant processes that promote innovation. Avik has a background as a qualified security assessor (QSA) for payment card industry (PCI) data security standard (DSS) and point-to-point-encryption (P2PE), giving him rich knowledge around deep security technology, people, and process advisory for clients in various industries, including retail, financial, and technology. His hands-on expertise spans advanced persistent threat mitigation, security architecture design, payment card security, and compliance frameworks.

As an advocate for cultivating a robust security culture, Avik regularly engages with the security community by delivering technical sessions at flagship events such as AWS re:Invent, AWS re:Inforce, major industry conferences, and professional association chapters, where he is recognized as a thought leader in cloud security and risk management. He has also published multiple technical blogs and whitepapers on cybersecurity. Avik is passionate about mentoring the next generation of security professionals and contributing to industry training as a SANS curriculum developer.

Avik holds an MBA in information systems and marketing from Symbiosis International University and a bachelor’s degree in computer science and engineering from Utkal University. He is a Certified Information Systems Security Professional (CISSP), AWS Certified Security – Specialty, AWS Certified Solutions Architect, AWS Certified AI Practitioner, and PCI Professional (PCIP).