Back to Course

Incident Response with CloudTrail and Athena

0% Complete
0/0 Steps
Lesson 1 of 50
In Progress

Start here!

Christophe January 24, 2024

Welcome!

Before you proceed in taking this course, please have completed our course called “Beginner’s Guide to CloudTrail for Security” first, as this continues where we left off in that other course. It’s a free and short course ( < 1h30 ). If you already have some experience with CloudTrail, you can skip that pre-requisite.

This course uses Identity Center and Roles

We will be making use of IAM Identity Center and IAM Roles quite extensively.

If you don’t have much experience with IAM Roles or you’re not familiar with what they are and how they work (ie: how to assume them), then this course is a pre-requisite: Practical Guide to AWS IAM Roles.

If you don’t have experience with Identity Center or you’re not sure what that is and you’re using IAM users for accessing your AWS environments, then don’t worry, I will show you how to set it up.

We’re using Identity Center for this course because unless you have a very good reason to be using IAM Users in your environment, you should be using Identity Center for user access. It offers many benefits and is the recommended approach for managing workforce access in AWS.

You can still use IAM Users and Groups instead if you really want to, but just keep in mind that many of the steps around assuming roles and setting up permissions will be different and so you’ll have to figure out the differences as we go along.

Costs associated with this course

Please note that you may have small costs associated with the actions you will take and resources you will deploy. We’re dealing with real resources here! As we add 🧪 Hands-On Labs to the course, you will be able to circumvent some of that, but whatever you do in your accounts may accrue small charges.

As an estimate, I would say less than $10 in total. Probably even just a few cents to a few dollars.

So before proceeding, set up budgets and alarms in your account (we have a lesson for how to do that in this course) and verify pricing before launching a resource.

Conclusion

If you have any questions let me know in the comments below or in our community.

Thanks!

Christophe

Responses

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.