How to Build a Threat Detection Strategy in AWS

This webinar will be conducted by speaker Joseph Holbrook, who is an AWS Subject Matter Expert (SME).


Learning Style

Amazon Web Services




1 Hour

Course Duration

Course Info

Download PDF


See Sample

About Individual Course:
  • Individual course plan gives you access to this course
/ Each
2 Learners Have Enrolled For This Course
When you subscribe, you get:
Learn Subscription plan gives you access to this course and over 840 other popular courses
On Sale!
Now Only $39.99 Regular Price $44.99
Now Only $39.99 Regular Price $44.99
/ Month
  • Buy 5-9 Enrollments And Save 68% ($12.74 monthly.)
  • Buy 10-19 Enrollments And Save 72% ($11.24 monthly.)
  • Buy 20-above Enrollments And Save 78% ($8.99 monthly.)
2 Learners Have Enrolled For This Course

You have already taken demo for this course.

If you want to get access to demo again, feel free to contact our support at (855) 800-8240

This webinar will be conducted by speaker Joseph Holbrook, who is an AWS Subject Matter Expert (SME).

Course Information

About this course:

This webinar will be conducted by speaker Joseph Holbrook, who is an AWS Subject Matter Expert (SME). He will be delivering lecture on “How to Build a Threat Detection Strategy in AWS” which is important for every AWS Cloud administrator to know. Having a strong Threat Detection Strategy will serve as very much helpful for your organization as it will protect them from the common exploits in the system. Not only this, the strategy will also secure your AWS resources which will decrease any sort of impact of a potential breach, even if one occurs. This webinar will teach about various different Intrusion Detection Systems, Advanced Threat Detection Systems and several other security tools that give an active response to the oncoming threats of the system. The lecture will also cover the topic of Amazon GuardDuty. Amazon GuardDuty is a threat detection service that performs the role of constantly regulating the system for any sort of dangerous activity and unauthorized actions to protect the AWS accounts and information. In the lecture, we will also go over the aspect of how this can provide us with great value by taking in several metadata streams at organizational level from several different sources. The sources can include programs like AWS CloudTrail, VPC Flow Logs, and DNS logs.

There will be an additional bonus in this course too. The lecture will also talk over the ways in which AWS Lambda can be utilized to automate activities like, changing security groups, isolating instances, or rotating credentials to ease administrative workload.

Did you know?

  • AWS has direct and concise Cloud Adoption Framework (CAF) Security Perspective Controls which enables the organizations to quickly decrease their threat footprint.
  • Majorly, the reason for the occurring of security instances are due to credential theft (according to the 2018 Verizon Data Breach Investigations Report), and not because of compliacted zero-day attacks against cloud providers themselves.
  • In the span of within three months, AWS has made upgrades of adding twelve more anomaly detections in the system. Nine of them are CloudTrail-based anomaly detections that accurately pinpoint highly suspicious activity in your accounts.
  • The VPC Flow log entries can be scanned by GuardDuty service in order to detect both specific and anomalous attack patterns.

Learning objectives:

The course has the following learning objectives:

  • Gaining understanding of Shared Security Model
  • Getting an introduction to Threat Detection
  • Gaining skills regarding Intrusion Detection Systems, Advanced Threat Detection Systems and several other security programs that provide the benefit of an active response to the oncoming threats for the system
  • Knowing how to build a Threat Reduction Strategy
  • Learning about Cloud Adoption Framework (CAF) Security Perspective Controls
  • Understanding AWS GuardDuty Monitoring (a demo)
  • Learning the objectives of AWS Security Specialty Certification
  • Gaining the understanding of what the course is for fundamentally i.e. a course summary


The course has been intended for the following groups:

  • Security practitioners like, security analysts, architects, senior security engineers etc.
  • Cloud Security Architects
  • The office of the CISO




More Information

More Information
BrandAmazon Web Services
SubjectsCloud Computing
Lab AccessNo
Learning StyleSelf-Paced Learning
Learning TypeCourse
Course Duration1 Hour


Write Your Own Review
Only registered users can write reviews. Please Sign in or create an account

Course Authored By:


Joseph Holbrook
(The Cloud Tech Guy)

Joseph has been in the IT field since 1993, when he was exposed to several HPUX systems on board a U.S. Navy flagship. He has migrated from the UNIX world to storage area networking (SAN), enterprise virtualization, and cloud architectures, and now specializes in blockchain and cryptocurrency. He previously worked for numerous companies such as HDS, 3PAR, Brocade, HP, EMC, Northrup Grumman, ViON, Ibasis.net, Chematch.com, SAIC, and Siemens Nixdorf.

This Subscription Includes:

Virtual instructor Led

Virtual Classroom Courses

Our virtual instructor-led courses give you access to live instructors training you with other live students in a virtual classroom environment.

200+ Virtual Classroom Courses

Online Self-Paced Courses

Take self-paced online courses at your convenience and own pace, with unlimited access to courses in various emerging technologies.

700+ Self-Paced Courses

E-books blogs, case studies, ariticles

As part of informal learning, our platform will recommend E-books, whitepapers, case studies, articles, and videos. This is AI curated content closely aligned with your learning objectives.

E-books blogs, case studies,...

College Accredited Courses

QuickStart courses are accredited by several top schools and universities, including Texas A&M and University of Phoenix. You can print out certificates and also apply them towards your degree plan with them.

College Accredited

Full Learning Dashboard & Analytics

Access all your enrolled, completed, course statistics, and community discussions from one centralized and intuitive learning dashboard with built in analytics, course tracking, time spent, and more.


QuickStart Discussions

Engage with other learners where you can directly chat, ask questions, and socialize with other learners experts and instructors on a course subject.

Community Access Community Access

Virtual Labs

Videos and lectures only go so far. Get real world, hands-on practice with virtual labs (not available for all courses).

Virtual Labs Virtual Labs
Live Instructor Support

Live Instructor Mentoring & Support

Get your IT problems solved through a community of mentors, experts and peers. Get live help from experts to answer questions on course material or guidance on a project.

Mentoring & Discussions Mentoring & Discussions

Career Paths

Start a learning pathway towards understanding and mastering your career. With QuickStart career paths, you can fully understanding and being the best in your field.

Learning Paths Learning Paths

Informal Learning

Access to AI curated content from various content publishers which can help in self-directed learning.

Informal Learning Informal Learning
click here