AWS DevSecOps Online Training

Duration3 Months

Mode of TrainingOnline

LevelAdvanced

AWS DevSecops

DevOps term was coined by merging two words "Development" and "Operations". DevOps is an IT cultural shift that primarily focuses on improved collaboration, better communication, reliability and integration through adoption of agile methodology.

DevSecOps Training allows you to overcome the security challenges of the DevOps culture and gain the advantages of cloud computing. This DevSecOps online training introduces you to the security controls in the automated pipelines to deliver the modifications to the cloud-based systems and secure DevOps and modern cloud environments. Get Enroll for the Most Advanced DevSecOps Training.

What you'll learn

DevSecOps Best practices for building secure pipeline

DevSecOps pipeline flow & DevOps pipeline

Basics Of DevOps & DevSecOps

DevOps + Security

Jenkins Pipeline

Security Tools Integration

Jenkins Installation using docker

Docker

Why Visualpath?

→Real-Time Working Professional Trainers
→Daily Recorded Videos
→Technical Assistance even after Course Completion
→Live Projects Implementation
→100% Real-Time Projects & Use-cases
→Latest Industry Trend Curriculum

You may also see course CurriculumDevSecOps with AWS Cloud Course Curriculum

Linux OS

Linux Architecture (Linux Flavors and Kernel)
Understanding core principle of Linux OS
Ubuntu 20.04 or 22.04 LTS version Installation as of today on Oracle VirtualBox [Ubuntu 20.04 Server] and [Oracle VirtualBox Download]
SSH and Password based authentication
Basic commands to handle Linux OS like cat, ls, date, free, top etc.,
Core fundamentals for Root Filesystem (/) like /root, /proc. /lib, /bin etc.,
Accessing Server and Managing networking (IP addresses and Classes etc.,)
Understanding basic commands as initial stage like ssh, ls, ip, cp, mv, mkdir, apt etc.,
Package management on Ubuntu
Installing packages on Ubuntu and understand the default files and folders to be managed Nginx/Apache, MySQL, WordPress applications
Linux file editors like nano, vi, vim
Linux File permissions and ownership management with chown and chmod commands
System and Network troubleshooting commands
Disk Management: partitions and LVM (Logical Volume Manager)

Shell Scripting

What are commands and shell scripts?
Types of shells support in Linux OS
Difference between sh and bash
Permissions and execution
Variables and Arrays
Conditions and Loops
IO Redirection
Shell Functions
Exit codes
Important commands for scripting and daily operations like grep, awk, sed, find etc.,
Signals and numbers

Shell scripting

Types of Shells
Script execution approaches
Variables
Operations
Conditions
Loops
Functions
Best practices

Networking

IP address types like IPv4 and IPV6
What is IPv4?
Classes
IP address
Public and Private IP addresses
Subnet
Broadcast
CIDR
Gateway IP address and NAT Gateway
Routers and Switchesv
DNS
Hostname
How to calculate IP address using simple formulas?
How to assign IP address and handle network in Linux OS Machines (VMs or Bare- Metal Servers)
Network troubleshooting tools like ping, netstat, nmap, traceroute etc.,
How to manage Virtual Network will be covered in AWS VPC Network

Ansible (Configuration Management Tool)

What is Configuration Management?
Opensource tools for Configuration Management
Why Ansible and Ansible architecture
Ansible setup and configuration
Add-hoc commands
Understanding hosts and ansible.cfg files
YAML Fundamentals
Variables and Facts
Groups_vars and host_vars etc.,
Modules
Roles
Playbooks
Tasks
Ansible Galaxy

Docker and Kubernetes

What is Container and Images?

Applications on Virtual Machines
Applications on Containers
What are container images?

Why must we run applications on Containers?
Docker and Use cases?
Docker Fundamentals
Docker public images from Docker Hub
Docker private images
Docker Containers

Docker Networking
Host
Bridge
None
Overlay

Docker Storage

Volume mount
Bind mount
Tempfs mount

Docker Backup and Restore

Data backup
Images
Containers

Docker Registry

Local Registry

Custom Images build using Dockerfile
Scan tools like Trivy, Clair etc., to identify Vulnerabilities in Images
Docker Compose
Kubernetes Architecture
Kubernetes control plane and compute plane components
Kubernetes setup on local system using kubeadm
How to connect/reach k8s cluster using KUBECONFIG file
Kubernetes authentication and authorization
Kubernetes workloads

Pods
Replication Controller
ReplicaSet
Deployment
Daemonset
Statefulset
Jobs and Cronjobs

Kubernetes Storage

Volumes
PV, PVC and StorageClass
CSI

Kubernetes ConfigMap and Secrets
Services

ClusterIP
NodePort
LoadBalancer
ExternalIP and ExternalName

Ingress Controller
Network Policy
CIS benchmarking tools like kube-bench etc.,
Rest of the topics will be part of EKS Cluster on AWS

Jenkins CICD

What is CICD?
Jenkins components
Installing and Configuring Jenkins on AWS EC2 or VirtualBox
Jenkins authentication and authorization
Plugins
Global system settings
Jenkins Jobs

Free style Project
Multi-branch project
Folder
Pipeline Project

How to write a DSL (Domain Specific Language) pipeline for CICD automation?

SonarQube

What is Static code analysis?
Tools available for static code analysis
SonarQube architecture and components
Sonar scanner for Terraform configuration analysis
Integrate SonarQube with Jenkins CICD for SCA
Analyzing report generate in Sonar Dashboard

AWS Administrative Services

What is Cloud Computing?
What is IaaS, PaaS, and SaaS?
Why AWS Cloud?
AWS account creation and access
Secure AWS Count without root access
Understanding Compute, Monitoring, Authentication & Authorization services, and their dashboards
IAM (Identity and Access Management)

What is Authentication and Authorization?
MFA and IAM administrative access
Users
Groups
Policies (Inline and JSON)
Roles
Account settings
STS (Security Token Service)

EC2 Dashboard

Differences between Bare-metal and Virtual Machines (Cloud and On-Premises)
Amazon Machine Image
Instance types (Flavors)
Security Group
Disk
Key pairs
How to connect to EC2 Instances
Instance types like On-Demand, Reserved, Spot, Dedicated Instance and Dedicated host
Launch Template
Image creation from EC2 Instance

AWS VPC

What is VPC?
Network, Subnet, Route Table, Subnet Association
Internet gateway and NAT gateway
Elastic IP
VPC Peering
Transit Gateway
ACL
Egress Only Internet gateway
Endpoints and Carrier gateway
Endpoint Services
Site-to-site VPN

AWS Storage services

What is Object, Block and Filesystem Storage?
S3 buckets
EBS (Elastic Block Storage)
EFS (Elastic Filesystem)
AWS Storage Gateway
AWS Transfer Family
Databases

Understanding Relational and Non-Relational Databases
Databases provided by AWS RDS
What is a Database Engine?
Microsoft SQL Server
How to connect databases from different remote locations?
Backup and restore functionalities

AWS LoadBalancer

What is LoadBalancer?
Difference between Layer 7 and Layer 4 load balancing?
Types of LoadBalancer support in AWS

CLB (Classic Load Balancer)
ALB (Application Load Balancer)
NLB (Network Load Balancer)
GLB (Gateway Load Balancer)

Target Groups

AWS Auto Scaling

What is autoscaling?
How does it help to spin multiple EC2 instances horizontally?
Creating Launch Configuration
How to create and manage Auto Scaling groups?
Notifications

AWS CloudWatch

What is CloudWatch?
Alarms
Logs
Events
Metrics
Insights
Application Monitoring

AWS CloudTrail for auditing AWS account
AWS CloudFormation Templates
Container and Orchestration services

ECS (Elastic Container Service) and Fargate
ECR (Elastic Container Registry)
EKS (Elastic Kubernetes Service) and Fargate
Accessing EKS Cluster
Private and Public EKS Cluster
VPC network
IAM roles and policies for EKS
Node Group
External DNS for AWS Route 53 for EKS Ingress hosts

AWS Route 53

What is DNS?
What are DNS domain zones?
DNS troubleshooting tools
Private and Public zones
Internal and External Domains in AWS Route 53v
AWS Notification services

Simple Email Service
Simple Notification Services
Simple Queue Service

AWS Certificate Manager
AWS System Manager
AWS Backup
AWS ElastiCache

Git (Distributed Version Control System)

What is Version control system?
Difference between CVCS and DVCS?
Why Git?
Git workflow
Git commands (add, init, push, pull, commit, etc.,)
Git logs
Git repositories like GitHub, AWS CodeCommit
Branching strategies
Tagging code
Reset Vs Rebase
How to fix merge conflicts in git?
Integrate CI with Jenkins and GitHub

Terraform (Infrastructure as Code)

What is Infrastructure as a Code?
Opensource tools for IaC
Why only Terraform?
Terraform Setup and Configuration to communicate AWS Cloud provider
Terraform workflow
Terraform configuration language
Terraform top-level blocks
Terraform resources
Terraform variables
Terraform functions
Terraform values
Terraform datasources
Terraform backends
Terraform workspaces
Terraform modules public and custom
Terraform expressions
Terraform disaster recovery

Security tools for DevSecOps

Trivy for Image vulnerability scan as part Docker Image build
Build CICD workflow to build, scan, and push images to ECR
Implement CIS benchmark check on Docker Engine machine using Docker Security
Understanding the checks its status code which to be ignore and one which must be considered to fix
Integrating CICD to workflow to run check on Kubernetes cluster using Kube-bench tool
KubeLinter tool helps to analyze manifests files (YAML) and Helm charts as well

End-to-End Live Project deployment using DevSecOps automation tools