Week 4 Worklog
Week 4 Objectives:
- Focus on security controls, service limits, and access management.
- Practice tools that strengthen governance and protection on AWS.
Tasks to be carried out this week:
| Day | Task | Start Date | Completion Date | Reference Material | Status |
|---|---|---|---|---|---|
| 1 | AWS: Quotas & Environment | 05/08/2026 | 05/08/2026 | Reviewed service quotas and working environment setup | Completed |
| 2 | AWS: EBS Backup Automation | 05/09/2026 | 05/09/2026 | Automated snapshots and backup patterns | Completed |
| 3 | AWS: SSO & Permissions | 05/10/2026 | 05/10/2026 | Explored centralized identity and permissions | Completed |
| 4 | AWS: IAM Policies & Sec Hub | 05/11/2026 | 05/11/2026 | Practiced IAM policy design and compliance checks | Completed |
| 5 | AWS: S3 Endpoints & WAF | 05/12/2026 | 05/12/2026 | Implemented private S3 access and app protection | Completed |
| 6 | AWS: Macie & KMS | 05/13/2026 | 05/13/2026 | Applied encryption and sensitive data discovery | Completed |
| 7 | AWS: Secrets & Firewall Mgr | 05/14/2026 | 05/14/2026 | Managed secrets and security policies at scale | Completed |
Daily Details
Day 1 - AWS: Quotas & Environment
- Reviewed service quotas and prepared the working environment before deeper labs.
Day 2 - AWS: EBS Backup Automation
- Automated snapshots and learned basic backup planning for EBS volumes.
Day 3 - AWS: SSO & Permissions
- Explored centralized identity with SSO and practiced permission assignment.
Day 4 - AWS: IAM Policies & Sec Hub
- Designed IAM policies and used Security Hub to review security posture.
Day 5 - AWS: S3 Endpoints & WAF
- Implemented private S3 access patterns and added application protection with WAF.
Day 6 - AWS: Macie & KMS
- Applied encryption with KMS and reviewed sensitive data discovery with Macie.
Day 7 - AWS: Secrets & Firewall Mgr
- Managed secrets and centralized security policies across multiple accounts.
Week 4 Achievements:
- Improved capability to design layered security controls.
- Practiced IAM, KMS, Macie, WAF, and Security Hub in realistic scenarios.
- Built stronger awareness of governance and compliance requirements.