Directory Service LAB

 1. Create a Simple AD Directory

• Navigate to the Directory Service console: In the AWS Management Console, search for "Directory Service" and select the Directory Service service.
• Create a directory: Click on "Create directory".
• Choose a directory type: Select "Simple AD Directory".
• Configure directory settings:
  Specify the desired directory settings, such as the directory name, VPC, subnet, and administrator password.
• Create the directory: Click on "Create directory".

creating a Simple AD Directory in the AWS Directory Service console

2. Join Your Instances

• Join instances: Use the AWS CLI or the Directory Service console to join your EC2 instances to the Simple AD Directory.

joining an EC2 instance to a Simple AD Directory

Microsoft AD Connector Labs

1. Create a Microsoft AD Connector

• Navigate to the Directory Service console: In the AWS Management Console, search for "Directory Service" and select the Directory Service service.
• Create a directory: Click on "Create directory".
• Choose a directory type: Select "Microsoft AD Connector".
• Configure directory settings: Specify the desired directory settings, such as the directory name, VPC, subnet, and on-premises AD domain.
• Create the directory: Click on "Create directory".

creating a Microsoft AD Connector in the AWS Directory Service console

2. Configure Your On-Premises AD

• Configure your on-premises AD: Follow the instructions provided by Directory Service to configure your on-premises AD domain for replication.

3. Synchronize Directories

• Synchronize directories: Use the Directory Service console to initiate directory synchronization between your on-premises AD and the AWS directory.

Detective LAB

 

1. Enable Detective

• Navigate to the Detective console: In the AWS Management Console, search for "Detective" and select the Detective service.
• Enable Detective:
  Click on "Enable Detective".

enabling Detective in the AWS Management Console

2. Create a Behavior Graph

• Create a behavior graph: Click on "Create behavior graph".
• Name your behavior graph: Give your behavior graph a unique name.
• Choose a region: Select the region where you want to create your behavior graph.
• Create the behavior graph: Click on "Create behavior graph".

creating a behavior graph in the AWS Detective console

3. Analyze Your Data

• Analyze your data: Detective will automatically analyze your logs and identify potential security threats.
• View anomalies: Review the anomalies identified by Detective.

viewing anomalies in the AWS Detective console

4. Investigate Anomalies

• Investigate anomalies: Use the Detective console to investigate the identified anomalies and determine if they pose a security threat.

investigating anomalies in the AWS Detective console

5. Take Action

• Take action: If an anomaly is confirmed to be a security threat, take appropriate action to mitigate the risk.

Cognito LAB

 1. Create a User Pool

• Navigate to the Cognito console: In the AWS Management Console, search for "Cognito" and select the Cognito service.
• Create a user pool: Click on "Create user pool".
• Name your user pool: Give your user pool a unique name.
• Configure user pool settings:
  Specify the desired settings, such as the email verification process, password policies, and MFA options.
• Create the user pool: Click on "Create user pool".

creating a user pool in the AWS Cognito console

2. Create a User Pool Client

• Create a user pool client: Click on "Create user pool client".
• Name your client: Give your client a unique name.
• Configure client settings: Specify the desired settings, such as the app client ID and allowed OAuth flows.
• Create the client: Click on "Create user pool client".

creating a user pool client in the AWS Cognito console

3. Integrate with Your Application

• Integrate with your application: Use the AWS SDKs or the Cognito API to integrate your application with the user pool.

Identity Pools Labs

1. Create an Identity Pool

• Create an identity pool: Click on "Create identity pool".
• Name your identity pool: Give your identity pool a unique name.
• Configure identity pool settings: Specify the desired settings, such as the identity providers and authentication flows.
• Create the identity pool: Click on "Create identity pool".

creating an identity pool in the AWS Cognito console

2. Configure Identity Providers

• Configure identity providers: Add the desired identity providers to your identity pool, such as Facebook, Google, or Amazon.

configuring identity providers in the AWS Cognito console

3. Integrate with Your Application

• Integrate with your application: Use the AWS SDKs or the Cognito API to integrate your application with the identity pool.

CloudHSM labs

 

1. Create a CloudHSM Cluster

• Navigate to the CloudHSM console: In the AWS Management Console, search for "CloudHSM" and select the CloudHSM service.
• Create a cluster: Click on "Create cluster".
• Choose a cluster type: Select the desired cluster type based on your security and performance requirements.
• Configure cluster settings: Specify the desired cluster settings, such as the VPC, subnet, and high availability options.
• Create the cluster: Click on "Create cluster".

creating a CloudHSM cluster in the AWS Management Console

2. Create HSM Modules

• Create HSM modules: Once your cluster is created, create HSM modules within the cluster.
• Configure module settings: Specify the desired module settings, such as the partition and the number of partitions.

creating HSM modules in the AWS CloudHSM console

3. Generate Cryptographic Keys

• Generate keys: Use the AWS CloudHSM API or the CloudHSM client to generate cryptographic keys within your HSM modules.
• Configure key settings: Specify the desired key settings, such as the key type, key length, and key usage.

generating cryptographic keys in the AWS CloudHSM console

4. Use Cryptographic Keys

• Use keys: Integrate your applications with CloudHSM to use the generated cryptographic keys for encryption, decryption, and other cryptographic operations.

5. Manage Your Cluster and Modules

• Manage clusters: Manage your CloudHSM clusters by adding or removing modules, modifying cluster settings, and patching the software.
• Manage modules: Manage your HSM modules by generating keys, deleting keys, and configuring module settings.

Certificate Manager LAB

 

1. Request a Certificate

• Navigate to the Certificate Manager console: In the AWS Management Console, search for "Certificate Manager" and select the Certificate Manager service.
• Request a certificate: Click on "Request a certificate".
• Choose a certificate type: Select either "Request a certificate" or "Import a certificate".
• Configure certificate settings: Specify the desired certificate settings, such as the domain names, validation method, and validity period.
• Request the certificate:
  Click on "Request certificate".

requesting a certificate in the AWS Certificate Manager console

2. Validate the Certificate

• Validate the certificate: Follow the instructions provided by Certificate Manager to validate your certificate. This typically involves adding DNS records or uploading files to your website.

validating a certificate in the AWS Certificate Manager console

3. Deploy the Certificate

• Deploy the certificate: Once your certificate is validated, you can deploy it to your website, application, or API.

deploying a certificate in the AWS Certificate Manager console

4. Manage Your Certificates

• View certificates: View the list of certificates in your account.
• Renew certificates: Renew certificates before they expire.
• Export certificates: Export your certificates in various formats.
• Share certificates: Share certificates with other AWS accounts.

AWS Audit Manager LAB

 

1. Create an Audit

• Navigate to the Audit Manager console: In the AWS Management Console, search for "Audit Manager" and select the Audit Manager service.
• Create an audit: Click on "Create audit".
• Choose a framework: Select the framework you want to use for your audit (e.g., ISO 27001, PCI DSS, HIPAA).

creating an audit in the AWS Audit Manager console

• Configure audit settings: Configure the audit settings, such as the audit name, description, and due date.
Opens in a new window docs.aws.amazon.com
configuring audit settings in the AWS Audit Manager console

2. Add Controls

• Add controls: Click on "Add controls".
• Choose controls: Select the controls that are relevant to your audit.

adding controls to an audit in the AWS Audit Manager console

3. Collect Evidence

• Collect evidence: Use the evidence collector to gather evidence from various AWS services and on-premises systems.

collecting evidence in the AWS Audit Manager console

4. Assess Evidence

• Assess evidence: Review the collected evidence and assess its relevance to the corresponding controls.

assessing evidence in the AWS Audit Manager console

5. Generate Reports

• Generate reports: Generate reports that summarize the audit findings and compliance status.

generating reports in the AWS Audit Manager console

6. Share Reports

• Share reports: Share reports with stakeholders, auditors, or regulators.

AWS Artifact LAB

1. Enable Artifact in Your Account

• Navigate to the Artifact console: In the AWS Management Console, search for "Artifact" and select the Artifact service.
• Enable Artifact: Click on "Enable Artifact".

enabling Artifact in the AWS Management Console

2. Select Your Region

• Choose a region: Select the region where you want to create your Artifact repository.
 
selecting a region in the AWS Artifact console

3. Create an Artifact Repository

• Create a repository: Click on "Create repository".
• Name your repository: Give your repository a unique name.
• Choose a format: Select the desired report format (PDF, CSV, or JSON).
• Create the repository: Click on "Create repository".

creating an Artifact repository in the AWS Artifact console

4. Configure Your Repository

• Add reports: Add the desired reports to your repository. Artifact supports a variety of reports, including compliance reports, configuration reports, and usage reports.

adding reports to an Artifact repository

• Schedule reports: Schedule reports to be generated automatically on a regular basis.

scheduling reports in the AWS Artifact console

5. Access Your Reports

• View reports: Once your reports are generated, you can view them in the Artifact console.

viewing reports in the AWS Artifact console

• Download reports: Download reports in your desired format.

downloading reports from the AWS Artifact console

6. Manage Your Repository

• Delete reports: Delete reports that are no longer needed.
• Modify repository settings: Modify repository settings as needed.
• Share reports: Share reports with others within your organization or with third-party auditors.