---
description: 可以实际上手体验的模拟环境，帮助更快学习使用AWS服务。
---

# AWS Security Workshops

## Workshop

<table><thead><tr><th width="258">Workshop Name</th><th>Description</th></tr></thead><tbody><tr><td><a href="https://catalog.us-east-1.prod.workshops.aws/workshops/dc413216-deab-4371-9e4a-879a4f14233d/en-US">ZeroTrust workshop</a></td><td>This workshop focuses on applying Zero Trust principles to the service-to-service architectures we see in many micro-architecture or distributed environments today. This is not the only type of architecture that can benefit from these principles however, as scenarios like end-user access and Industrial IoT can benefit as well. Keep an eye out for any sequels that may delve into these use cases as we continue the Zero Trust saga.</td></tr><tr><td><a href="https://workshops.aws/categories/Security">AWS Security Workshops</a></td><td>这是一个AWS security workshops的统一入口，在这里，您将找到一系列研讨会和其他实践内容，旨在帮助您了解 AWS 服务生态系统，并向您介绍可用于保护在 AWS 中运行的环境和工作负载的各种最佳实践。</td></tr><tr><td><a href="https://wellarchitectedlabs.com/">AWS Well-Architected Labs</a></td><td><p>适合：刚上AWS云，刚迁移到AWS的客户学习。</p><p>实验包含了文档和代码，帮助你学习和搭建使用架构最佳实践。实验按照能力做了分类，100是入门介绍，200/300是中级，400是高级。</p></td></tr><tr><td><a href="https://wa.aws.amazon.com/wat.map.en.html">AWS Well-Architecture MindMap</a></td><td>脑图的方式看良好架构设计的各个主题以及主题下面的小节。点击后可以查看详细的信息。</td></tr><tr><td><a href="https://catalog.workshops.aws/sec4devs/en-US">Security for Developers</a></td><td>In this workshop you’ll learn how to think about security for the things you are responsible for - <em>the applications that you build</em>. We’ll go through the common security risks and the tools &#x26; techniques that you can use to secure your applications without making major impact to your Software Delivery.</td></tr><tr><td><a href="https://catalog.us-east-1.prod.workshops.aws/workshops/026f84fd-f589-4a59-a4d1-81dc543fcd30/en-US">Serverless Security Workshop</a></td><td>In this workshop, you will learn techniques to secure a serverless application built with AWS Lambda, Amazon API Gateway and RDS Aurora.</td></tr><tr><td><a href="https://catalog.workshops.aws/verified-permissions-in-action/en-US">Amazon Verified Permissions workshop</a></td><td>In this workshop, we will deep dive into Amazon Verified Permissions and build out an authorization solution for a mythical Sweets Manager application.</td></tr><tr><td><a href="https://catalog.workshops.aws/wyld-pets-cognito/en-US">Amazon Cognito Workshop</a></td><td>In this workshop, you will deep dive into <strong>Cognito</strong> and build out an authentication solution for a mythical Pet Store.</td></tr><tr><td><a href="https://workshops.aws/card/IAM%20policy%20learning%20experience">IAM policy learning experience</a></td><td>Understanding how to build effective Identity and Access Management (IAM) policies is an important skill for everyone building on AWS as policies determine who can access what in your AWS account. In this workshop, you will learn how to write different types of IAM policies and implement access controls on principals and resources, using conditions to scope down access.</td></tr><tr><td><a href="https://catalog.us-east-1.prod.workshops.aws/workshops/5b805785-5cdf-45b2-ae01-79479f2ad3eb/en-US">Unleash the power of IAM Access Analyzer Unused Access </a></td><td><p></p><ol><li>Learn about <code>IAM Access Analyzer Unused Access</code> and how to use the feature programatically.</li><li>Build automations to remediate Unused Access findings</li><li>Exempt IAM resources from Unused Access findings via a pull request (PR) and create archive rules.</li></ol></td></tr><tr><td><a href="https://workshops.aws/card/Automating%20IAM%20policy%20validation%20and%20analysis%20using%20GitHub%20Actions">Automating IAM policy validation and analysis using GitHub Actions</a></td><td>Learn how GitHub Actions can automatically validate and analyze IAM policies when permitting developer policy authoring abilities without compromising security.</td></tr><tr><td><a href="https://catalog.workshops.aws/data-perimeter-in-action">Data perimeter in action </a></td><td>A data perimeter on Amazon Web Services (AWS) is a set of preventive controls you can use to help establish a boundary around your data in AWS Organizations. This boundary helps ensure that your data can be accessed only by trusted identities from within networks you expect and that the data cannot be transferred outside of your organization to untrusted resources. Understanding what data perimeter controls are and how to use them is important for every organization. In this builder session, you will learn how to use data perimeter controls to address common security concerns and improve your security strategy.</td></tr><tr><td><a href="https://catalog.workshops.aws/defend-your-genai-apps-zt-approach">Defend your generative AI applications with Zero Trust principles </a></td><td>Adopting a zero-trust approach is imperative for GenAI applications in the cloud as it ensures rigorous authentication and authorization for every access request, mitigating the risk of unauthorized data access. By assuming that no entity, whether inside or outside the network, should be inherently trusted, this model reduces the attack surface and enhances data security, compliance, and adaptability to dynamic cloud environments.</td></tr><tr><td><a href="https://catalog.us-east-1.prod.workshops.aws/workshops/33e6d0e7-f927-4531-abb1-f28a86ba0872/en-US">Amazon Connect SSO Setup Workshop</a></td><td>This workshop is in four parts, you can do all four or just choose the ones that are relevant each part takes about 60 minutes to complete, background knowledge of AWS IAM, Security fundamentals, Identity management, Single Sign On would help.</td></tr><tr><td><a href="https://catalog.us-east-1.prod.workshops.aws/workshops/f81841e0-b033-4355-8b6c-b2a404d544a4">Machine-to-machine access with IAM Roles Anywhere</a></td><td>Advanced machine-to-machine access with IAM Roles Anywhere &#x26; IAM Unused Access Analyzer</td></tr></tbody></table>
