This hands-on lab requires you to work with all of the following services: Amazon Inspector, web application firewall, and AWS Secrets Manager.
Learning Objectives
Successfully complete this lab by achieving the following learning objectives:
- Deploy Application Using CloudFormation Template
- From the CloudFormation console, select Create Stack.
- Upload the provided template.
- Click the icon to create stack.
- Enter parameters.
- Click Next.
- Click Next.
- Click Submit (to create stack).
- Create Secrets in Secrets Manager
- In the Secrets Manager console, click Store a new secret.
- Enter username and password for the secret.
- Select the database, then click Next.
- Give the secret a name, then click Next.
- Click Next, then click Store.
- Create Web ACL
- From the WAF console, click Create web ACL.
- Enter a name for the web ACL.
- Click Next.
- Select Add Rules, then select Add AWS Managed Rules.
- Click the radio buttons for Core rule set, SQL database, and Known bad input.
- Click Add rules.
- Click Next until you can click Create Web ACL.
- Create Instance Profile
- From the IAM console, select Roles, then Create role.
- Select EC2, then click Next.
- Attach policy: AmazonSSMManagedInstanceCore.
- Click Next, name the role, then click Create role.
- Enable Inspector and Security Hub
- Form the Inspector console, click Get Started.
- Click Enable Inspector.
- From Security Hub console, select Enable AWS Config.
- Select Enable Security Hub.
