Identity and Access Management (IAM)

• No specific requirements but familiarity with AWS and cloud platforms would be helpful.

Audience

• IT professionals
• Security analysts
• Anyone seeking to gain knowledge and skills in identity and access management

Identity and access management (IAM) is the process of ensuring that the right people and things have the right access to the right resources at the right time and for the right reasons. IAM involves authentication, authorization, and accountability of users, devices, applications, and data. IAM can help organizations improve their security, compliance, efficiency, and user experience.

This instructor-led, live training (online or onsite) is aimed at beginner-level to intermediate-level IT professionals and security analysts who wish to use IAM to manage and secure their digital identities and resources.

By the end of this training, participants will be able to:

• Use IAM concepts and terminology to describe and analyze different identity and access scenarios and challenges.
• Use IAM tools and technologies to implement and manage identity and access solutions for various platforms and environments.
• Use IAM standards and protocols to integrate and interoperate different identity and access systems and services.
• Use IAM best practices and frameworks to design and evaluate identity and access policies and processes.

Format of the Course

• Interactive lecture and discussion.
• Lots of exercises and practice.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

• Authentication
• Services Module Overview
• RADIUS
• TACACS
• Kerberos
• LDAP Secure
• LDAP SAML
• Module Review Authentication
• Authorization and Access Control Review Identification vs. Authentication vs. Authorization
• Identification Personal Identification
• Verification Card
• Username Authentication
• Tokens Common Access
• Card Multifactor
• Authentication
• TOTP HOTP CHAP PAP
• Single Sign-on Access Control
• Implicit Deny
• Trusted OS Authentication Factors
• Authorization
• Separation of Duties
• ACLs Mandatory Access Control Discretionary
• Access Control
• Role Based and Rule Based Access Control
• Time of Day Restrictions
• Federation Transitive Trust/Authentication
• Module Review Account Management
• Security Controls Module Overview User with Multiple Accounts
• Shared Accounts Account Policy
• Management Group Policy
• Password Complexity
• Expiration Recovery
• Disablement Lockout
• Password History
• Password Reuse
• Password Length
• Basic Concepts of AWS IAM
• What is the AWS IAM?
• Managing Users
• Managing Groups
• Managing Permissions
• Managing Roles
• Customization & Reports
• Login & Customization
• Getting Credentials Reports
• Improving security on AWS IAM
• Creating Keys with AWS KMS
• Setup Account Password Policy
• Enabling MFA on Accounts & Root
• Best Practices Using AWS IAM
• Generic Account Prohibition
• Group Based Privileges
• User Assigned Privileges
• User Access Reviews
• Continuous Monitoring