In this course, we’ll explore Amazon Web Services (AWS) as a platform. We will take the perspective of a new startup company spinning up infrastructure in AWS for the very first time.

We’ll use a scenario-based approach, where you’ll don the persona of a security engineer on your first day at a new startup. This course will demonstrate ideas like secure-by-default and will examine services and patterns for locking down defaults using a combination of open source and platform-native tooling. Finally, attendees will walk away with a practical understanding of various controls, detections, and guardrails.

Wild West Hackin’ Fest – Deadwood (Oct 7th – Oct 8th, 2025) – Deadwood, SD

October 7th – 8:30 AM to 5:00 PM MDT
October 8th – 8:30 AM to 5:00 PM MDT

Blue Team Summit (Aug 28th – Aug 29th, 2025)

August 28th – 9:00 AM to 6:00 PM EDT
August 29th – 9:00 AM to 6:00 PM EDT

Key Takeaways

In this course, students will learn how to:

Perform incident response in AWS
Provide technical guidance to teams implementing security controls on AWS
Enact user access management models
Audit for anti-patterns in cloud security
Prevent common types of data breaches on AWS
Avoid common mistakes and data breaches
Build scalable infrastructure

Students will also:

Gain insight into how to perform architecture reviews
Gain insight into developing runbooks and playbooks for their organization
Gain awareness of open-source tools to force multiply the security effort

Who Should Take This Course

Blue teamers, sysadmins, network admins, those working in devsecops, first responders, or anyone that wants to learn AWS cloud basics.

Audience Skill Level

This foundational course is for folks without any AWS skillset. The ideal attendee is someone looking to pivot from traditional sysadmin to CloudSec. Attendees with moderate experience will still benefit from hands-on labs with industry-standard, open-source tools and prescriptive guidance.

Student Requirements

Students should have familiarity with basic shell (bash), text editors, and launching VMs on their own machine.

What Each Student Should Bring

Students should have an AWS account that they are accountable and billable for just for this course. Please do not utilize your existing account.

What Each Student Will Be Provided With

Incident response cheat sheet of Athena queries
Downloadable VM file for the course
CloudFormation templates to bootstrap secure environments
Attack bot infrastructure for simulation of the course attack tactics

This class is being taught at Wild West Hackin’ Fest – Deadwood 2025.

For more information about our conferences, visit Wild West Hackin’ Fest!

Clicking on the button above will take you
to our registration page on the website.

Live Training

Collaborative interaction with Instructor and fellow students through the Antisyphon Discord class channel
Access to course slides for future reference
Tips, tools, and techniques that can be applied immediately upon returning to work
Strengthen your skills by solving challenges within the Antisyphon Cyber Range
Become part of a community driven to educate and share knowledge

On Demand Training

Train at your own pace with no set course schedule
Access to all course resources, including slides and VMs
Subject Matter Expert support through Discord
Tips, tools, and techniques that can be applied immediately upon returning to work
Strengthen your skills by solving challenges within the Antisyphon Cyber Range
Become part of a community driven to educate and share knowledge