From Journey to Practice: Cloud Security Architecture on AWS

SECURITY IS AN ARCHITECTURE DECISION. Not a choice of tool.

Securing a pipeline is one thing. Securing an entire organization in the cloud, with dozens of accounts, teams and sensitive data, is another.

This course book follows Open Learning, a fictional online learning platform that holds student data, much of it about minors, and that grew through acquisitions. From the asset inventory to the secure architecture package, each chapter deals with an architecture decision, not a tool.

You will learn to: model threats and define trust boundaries; organize multiple accounts with guardrails and controlled exceptions; apply least privilege at scale, understand permission ceilings and protect networks and data; build detection, evidence and incident response in the cloud; connect requirements, controls and evidence for audits and customer questionnaires.

4 case studies, 20 diagrams, more than 30 labs (three on AWS, with cost alerts and cleanup), checklists and exercises with an answer key. The book is not a substitute for legal advice.

About the author: André Romão Quinhoneiro has worked in IT since 2003. He is a DevOps Engineer at Broto, where he takes care of AWS infrastructure and information security, and he coordinates the company's LGPD (Brazil's data protection law) program. He holds a bachelor's degree in Computer Science and a graduate specialization in Cloud Computing Projects.