Enforcing S3 Public Access Blocking with AWS Config

CLOUD LABS

Enforcing S3 Public Access Blocking with AWS Config

In this lab, you’ll enforce S3 public access blocking using AWS Config and automatic remediation with AWS Systems Manager. This challenge-based exercise is designed for hands-on practice; step-by-step instructions will not be provided.

1 Task

intermediate

1hr

Certificate of Completion

Desktop OnlyDevice is not compatible.

No Setup Required

Amazon Web Services

Technologies

Config

Systems Manager

Desktop Only

No Setup Required

Amazon Web Services

Labs Rules Apply

Stay within resource usage requirements.

Do not engage in cryptocurrency mining.

Do not engage in or encourage activity that is illegal.

Cloud Lab Overview

Amazon S3 public access settings are critical for preventing inadvertent data exposure. AWS Config enables continuous monitoring of bucket compliance, while AWS Systems Manager Automation can automatically remediate any non-compliant resources.

In this Challenge Cloud Lab, you’ll be tested on your ability to configure AWS Config to monitor S3 buckets, enforce public access blocking, and implement automatic remediation via the runbook.

A high-level architecture diagram for this Challenge Cloud Lab is given below:

Cloud Lab Tasks

Implementing Continuous S3 Public Access Blocking

Labs Rules Apply

Stay within resource usage requirements.

Do not engage in cryptocurrency mining.

Do not engage in or encourage activity that is illegal.

Before you start...

Try these optional labs before starting this lab.

Cloud Lab

Managing Amazon EC2 Instances with Systems Manager Automation

beginner

2hr

Cloud Lab

Delete Unused EBS Volumes with AWS Config and Systems Manager

intermediate

1hr 30m

Cloud Lab

Getting Started with AWS Config

beginner

1hr 30m

Relevant Courses

Use the following content to review prerequisites or explore specific concepts in detail.

Hear what others have to say

Join 1.4 million developers working at companies like

"Your method is simple, straight to the point and I can practice with it everywhere, even from my phone, that's something I have never had in other learning platforms."

Felipe Matheus

Software Engineer

"I highly recommend Educative. The courses are well organized and easy to understand."

Adina Ong

Senior Engineering Manager

"I prefer Educative courses because they have a nice mix of text & images. I find that with full video courses, it can often be too easy to go into passive learning mode."

Clifford Fajardo

Senior Software Engineer

"I love the content on Educative and I feel as if I am definitely improving in my craft."

Thomas Chang

Software Engineer

Learn in-demand tech skills in half the time

PRODUCTS

Mock Interview

New

Courses

Skill Paths

Projects

Assessments

Newsletter

Fenzo

Enforcing S3 Public Access Blocking with AWS Config

AWS services you’ll be tested on: