Beginning Aws Security: Build Secure, Effective, and Efficient Aws Architecture

Improve cloud security within your organization by leveraging AWS's Shared Responsibility Model, Well-Architected Framework, and the Cloud Adoption Framework. This book will show you to use these tools to make the best decisions for securing your cloud environment.

You'll start by understanding why security is important in the cloud and then review the relevant services offered to meet an organization's needs. You'll then move on to the finer points of building a secure architecture and take a deep look into the differences of responsibility of managed services and those that allow customers more control.

With multiple AWS services available, organizations must weigh the tradeoffs between those that provide granular control (IaaS), a managed service (PaaS), delivering applications remotely over the internet instead of locally on machines (SaaS). This book will help you to identify the appropriate resources and show you how to implement them to meet an organization's business, technical, and security perspective in the Cloud Adoption Framework. Finally, you'll see how organizations can launch a secure and optimized cloud architecture and use monitoring tools to be proactive in security measures.

With Beginning AWS Security, you'll understand frameworks, models, and the services needed to build a secure architecture.

You will:

• Review the similarities and differences between cloud and traditional computing.
See how security changes when using on-site, hybrid, and cloud models
• Develop an understanding that security is not "one and done"
• Reinforce the need for updates and monitoring as a continued part of AWS security

Who This Book Is For
Cloud computing architects, security professionals, security engineers, and software professionals interested in Cloud security.

透過利用AWS的共同責任模型、良好架構框架和雲端採用框架，提升組織內的雲端安全性。本書將向您展示如何使用這些工具來做出最佳的雲端環境安全決策。

您將首先了解為何雲端安全性的重要性，然後檢視相關的服務以滿足組織的需求。接著，您將深入研究建立安全架構的細節，並深入瞭解受管服務和允許客戶更多控制的服務之間的責任差異。

由於AWS提供多種服務，組織必須在提供細粒度控制的服務（IaaS）、受管服務（PaaS）和通過互聯網遠程交付應用程序而不是在本地機器上（SaaS）之間權衡取捨。本書將幫助您識別適當的資源，並向您展示如何實施這些資源以滿足組織在雲端採用框架下的業務、技術和安全需求。最後，您將了解組織如何啟動安全且優化的雲端架構，並使用監控工具來主動進行安全措施。

透過《Beginning AWS Security》，您將了解建立安全架構所需的框架、模型和服務。

您將會：
- 檢視雲端和傳統計算之間的相似性和差異性。
- 瞭解在使用現場、混合和雲端模型時安全性的變化。
- 培養對安全性不是「一勞永逸」的理解。
- 強調更新和監控作為AWS安全性持續的一部分的必要性。

本書適合對雲端安全性感興趣的雲端計算架構師、安全專業人員、安全工程師和軟體專業人員。

Tasha Penwell is an AWS Educator, AWS Authorized Instructor, solutions architect, and community builder with a focus on security. In her career, she served as the computer science program manager for a community college in Ohio. Tasha has trained professionals on AWS, web development and data analytics. She is the founder and educator of Bytes and Bits, an organization that provides computer science education in Ohio and West Virginia. She is an active presenter and hosts computer science workshops on subjects like cloud computing at high schools around the country.

Tasha Penwell是一位AWS教育家、AWS授權講師、解決方案架構師和社群建設者，專注於安全性。在她的職業生涯中，她曾擔任俄亥俄州一所社區學院的計算機科學項目經理。Tasha曾培訓專業人士學習AWS、網頁開發和數據分析。她是Bytes and Bits的創始人和教育家，該組織在俄亥俄州和西維吉尼亞州提供計算機科學教育。她是一位活躍的演講者，並在全國各地的高中舉辦雲計算等計算機科學工作坊。