← Back to projects

Cloud security · Project overview

AWS Cloud Security

Secures AWS workloads with IAM, Inspector, Organizations policies, and WAF.

Project Overview

Created an EC2 instance configured for RDP and implemented IAM features for user and group creation, modifying existing groups to govern ICMP and RDP access to AWS resources. A virtual Windows Server was used with Amazon Inspector enabled to improve instance security. A mock company was established within the instance for centralized management of multiple AWS accounts, with service control policies created and security validated. An S3 bucket and CloudFront were configured to deliver a file, and AWS WAF was configured to control application traffic and determine what is permitted or blocked.

Purpose

The project demonstrates how identity management, vulnerability inspection, centralized account controls, and web application protections can work together to reduce cloud security risk.