From the course: AWS Certified Security - Specialty (SCS-C03) Cert Prep

Unlock this course with a free trial

Join today to access over 25,600 courses taught by industry experts.

[HOL] SSM Automation and Config Rules

[HOL] SSM Automation and Config Rules - Amazon Web Services (AWS) Tutorial

From the course: AWS Certified Security - Specialty (SCS-C03) Cert Prep

Start my 1-month free trial Buy for my team

[HOL] SSM Automation and Config Rules

“

In this hands-on lesson, we're going to create an AWS config rule that looks for any security group rules that allow access from any source address to port numbers other than port 80. Port 80 is fine. Obviously, we want people to be able to connect to our websites from the internet, but otherwise we're wide open. So that might be something that we want from a compliance perspective to restrict. So what we'll do is have config looking for compliant and non-compliant resources, and then SSM automation, so systems manager automation, will be used to remediate any non-compliant resources. In the course download in the AWS config directory, we have this config rule of remediation document. And so here we've got the general process of what we're going to do. Firstly, we'll create an IAM role for systems manager, and it's going to have this policy attached to it. We'll also add an inline policy with the code from this document, automation IAM role.json. Then we'll create a config rule using…

Contents