AWS Security Essentials

• Secure the AWS account root and set up organisational guardrails
• Write least-privilege IAM policies with confidence
• Design secure VPC networking
• Enable and use CloudTrail, Config and GuardDuty
• Encrypt data with KMS and manage secrets properly

1. 1

   Account & Root Security

   The first hour of a new AWS account.

   • Root account hardening
   • Billing alarms
   • Organisations and SCP basics

   Open module
2. 2

   IAM in Depth

   Policies, roles and boundaries.

   • Policy evaluation logic
   • Roles vs users
   • Permission boundaries
   • Access Analyzer

   Open module
3. 3

   VPC & Network Security

   Private by default.

   • Subnet design
   • Security groups vs NACLs
   • VPC endpoints
   • Flow logs

   Open module
4. 4

   Logging & Detection

   Know what happened.

   • CloudTrail configuration
   • AWS Config rules
   • GuardDuty findings
   • Security Hub

   Open module
5. 5

   Data Protection

   Encryption and secrets.

   • KMS keys and policies
   • S3 encryption and Block Public Access
   • Secrets Manager

   Open module
6. 6

   Baseline & Cleanup

   Codify it, then tear it down.

   • Baseline checklist
   • Automating checks
   • Cost-safe teardown

   Open module

PrimeSec does not hand you a pre-built machine. You get professional lab guides and build the environment yourself — that is where the skill comes from.

• Harden a new AWS account and enable billing alarms
• Write and test a least-privilege IAM policy
• Build a two-tier VPC with private subnets
• Enable CloudTrail and query the logs
• Trigger and investigate a GuardDuty finding
• Encrypt an S3 bucket with a customer-managed key
• Full account teardown verification

• An AWS security baseline document with screenshots
• An IAM policy library for common roles
• A detection and response runbook for GuardDuty findings