AWS Security Governance at Scale

AWS Security Governance at Scale is an intermediate-level course focused on automating security, compliance, account management, and governance across AWS environments. The course covers multi-account strategies, AWS Organizations, AWS Control Tower, preventive controls, detective controls, centralized logging, resource monitoring, and automated remediation.

Learners explore how governance can support developer agility while maintaining visibility, security, and control. The course includes practical activities using AWS Service Catalog, AWS Config, and AWS Systems Manager to provision resources, evaluate compliance, automate remediation, and manage resources at scale. AWS identifies this as a one-day, intermediate-level security and governance course covering concepts including landing zones, guardrails, and compliance-oriented controls.

• Establish a landing zone using AWS Control Tower
• Configure AWS Organizations to create a multi-account environment
• Implement identity management using AWS Single Sign-On users and groups
• Federate access using AWS SSO
• Enforce policies using prepackaged guardrails
• Centralize logging using AWS CloudTrail and AWS Config
• Enable cross-account security audits using AWS IAM
• Define workflows for provisioning accounts using AWS Service Catalog and AWS Security Hub
• Apply preventive cost and security governance controls
• Implement detective controls, compliance monitoring, and automated remediation using AWS Config and AWS Systems Manager

• AWS Security Fundamentals
• AWS Security Essentials
• Recommended familiarity with AWS Cloud Management Assessment, Introduction to AWS Control Tower, Automated Landing Zone, and Introduction to AWS Service Catalog