RCCE Course
Course #173

AWS Operations Playbook

📊 Level: Intermediate
⏱️ Duration: 2 Days
🏷️ Track: Cloud Security
📋 Prerequisites: Cloud foundations
🖥️ Mode: Online Instructor-Led
📝 Course Description

RCCE students will learn Amazon Web Services security architecture and operations including IAM policies, VPC security, Security Hub, GuardDuty, CloudTrail analysis, S3 bucket security, KMS encryption, and Lambda function security. RCCE students will learn to secure AWS workloads using native and third-party security controls, configure IAM least-privilege policies, design secure VPC architectures with security groups and NACLs, enable and analyze CloudTrail logs for security investigations, detect misconfigurations using AWS Config and Security Hub, respond to alerts from GuardDuty, and implement automated security remediation using Lambda and Step Functions. This operations-focused course delivers production-ready playbooks, checklists, and standard operating procedures. Building on core knowledge, RCCE students will learn to build repeatable day-to-day operational workflows that ensure consistency and quality. Students receive templates and frameworks they can customize and deploy immediately in their security operations, reducing time to operational effectiveness.

🎯 Target Audience
  • Cloud Security Architects and Engineers
  • DevSecOps and Platform Engineers
  • Identity and Access Management Specialists
  • Security Analysts securing cloud workloads
  • Professionals implementing AWS Operations Playbook
🧠 What You Will Learn
  • Execute hands-on tasks for aws operations playbook
  • Execute hands-on tasks for advanced cyber defense mastery
  • Explain Executive Overview fundamentals
  • Execute hands-on tasks for aws security landscape
  • Execute hands-on tasks for operational focus — covering Shared responsibility model scope.
  • Execute hands-on tasks for why operational security matters
  • Execute hands-on tasks for what this module delivers — covering Cloud misconfigs cause 65%+ of breaches, SOPs for IAM, VPC, S3, KMS operations.
  • Design a scalable privilege management architecture with policy and enforcement
  • Execute hands-on tasks for customer data & application security
  • Execute hands-on tasks for platform & network configuration
  • Explain AWS Foundation Services fundamentals
  • Integrate privilege controls with identity providers and SIEM telemetry
📚 Course Outline
Module 01AWS Operations Playbook
Module 02Advanced Cyber Defense Mastery
Module 03Executive Overview
Module 04AWS Security Landscape
Module 05Operational Focus
Module 06Why Operational Security Matters
Module 07What This Module Delivers
Module 08AWS Shared Responsibility Model
Module 09Customer Data & Application Security
Module 10Platform & Network Configuration
Module 11AWS Foundation Services
Module 12Identity and Access Management for users, roles,
Module 13AWS Security Architecture Overview
Module 14Perimeter Layer
🧪 Lab Details

All hands-on labs run on Rocheston Rose X OS. Students practice aws operations playbook by implementing the controls discussed in class, with a focus on real-world deployment, monitoring, and validation.

  • Lab 1: Execute hands-on tasks for aws operations playbook
  • Lab 2: Execute hands-on tasks for advanced cyber defense mastery
  • Lab 3: Explain Executive Overview fundamentals
  • Lab 4: Execute hands-on tasks for aws security landscape
  • Lab 5: Execute hands-on tasks for operational focus
📊 Skill Level
Intermediate
Beginner Intermediate Advanced Expert
Duration
2 Days
🎓
Certificate
Completion
🖥️
Lab Platform
Rose X OS
👨‍🏫
Mode of Training
Online Instructor-Led
🔥
Platform
Zelfire
🐦‍⬛
Cyber Range
Raven
📓
Study Material
CyberNotes
🏆 Certificate

Upon successful completion of this course, students will receive an official RCCE Course Completion Certificate for AWS Operations Playbook, verifiable through the Rocheston certification portal.

🔑 Student Access & Materials
  • Full access to all course materials and slide decks
  • Hands-on lab access on Rocheston Rose X OS environment
  • Access to Rocheston CyberNotes
  • Access to Rocheston Zelfire — EDR/XDR SIEM platform
  • Access to Rocheston Raven — online cyber range exercise platform
  • Access to Rocheston Vulnerability Vines AI