User management is the art of knowing who can go where, when and why. In this course, you’ll explore the principles of user management: user accounts, password policies, credential rotation, the principle of least privilege (making sure people only have the minimum access needed to do their jobs) and more.
User AccountsDuration: 11:26
As we move forward with a foundational understanding of IAM, we will begin exploring practical application. We will discuss best practices and tasks involved in user account creation and management.
Password PoliciesDuration: 9:09
With your user accounts, you will want to have strong passwords. AWS can help you with this through the implementation of password policies and you will learn how to use them in this episode.
Credential RotationDuration: 5:47
An additional factor is credential rotation. You will learn about this process and how to configure password rotation policies in this episode.
Principle of Least PrivilegeDuration: 5:11
One of the biggest and most common mistakes made in security management is granting too many permissions to a user. The principle of least privilege can assist in preventing this and it is covered in this episode.
IAM RolesDuration: 8:19
When you want an application or CLI interface to access AWS and its services, you can use IAM roles. This episode explores the process used to create and manage roles in AWS.
Policy ConditionsDuration: 8:22
Policy conditions impact when and how a policy is applied in AWS. In this episode you will see how to create an IAM policy and define policy conditions.
When you have IAM users, groups, roles and policies defined, it's time to think about how you will track or log everything that's going on in AWS. In this episode you will learn about AWS CloudTrail and how it can help you monitor and even be alerted in relation to the security events in your account.
Meet the author
Tom Carpenter is a 25+ year veteran of the IT industry. He started in entry-level systems support and quickly moved into the role of a systems analyst and network engineer. He founded the technical content development and training company SysEdCo in 1997, which he continues to operate. Having written more than 20 books for the IT industry, he brings a wealth of experience to any topic and holds many certifications from both vendors and vendor-neutral certification organizations. He is also the head of certification development for the CWNP program and heavily involved in objectives development and exam creation within the certification industry. Tom uses AWS to run several business websites as well as test labs used for content creation and management. According to Tom, "AWS is everything I did in the 90s, and more, in the cloud!” Tom lives in Ohio with his lovely wife Julie and enjoys anything related to technology, learning and human potential.
You're in good company
Infosec Skills is a very good place for building technical acumen and engineering development knowledge. It enables us to provide training to the entire team on relevant topics.
Romy Ricafort, West Division Senior Director of Sales Engineering
Comparing Infosec to other vendors is like comparing apples to oranges. My instructor was hands-down the best I've had.
James Coyle , Senior U.S. Public Sector Channel Sales Engineer
Train on your schedule
- 600+ courses
- 100s of hands-on labs and projects
- 70+ role-based learning paths
- Skill assessments
- Custom learning paths
- Custom certification practice exams
- Cloud-hosted cyber ranges
- Infosec peer community support
Infosec Skills Teams
- All Infosec Skills content for the year
- Team boot camp discounts — online or onsite (not included with subscription)
- Team administration and reporting
- Custom team learning paths
- Transferable licenses
- Dedicated client success manager
Award-winning training that you can trust
Best Software - Highest Satisfaction
Best IT Security-related Training Program
Best Cybersecurity Education Provider & Best Security Education Platform
Most Innovative Product - Cybersecurity Training for Infosec Professionals
Global Excellence - Cyber Security Education & Training
Exceptional learning experiences powered by LX Labs cyber expertise
Infosec Skills courses and labs are powered by LX Labs — our elite team of cyber SMEs, learning specialists and community of top-ranked security instructors, published authors and sought-after industry leaders. We rigorously vet all Infosec Skills training resources to guarantee they meet certification and compliance requirements and align with recognized guidelines like the NICE Cybersecurity Workforce Framework.