Deploy Skool デプロイ学校Deploy Skool デプロイ学校
← All tracks

Security

Think like an attacker so you can build like a defender.

9 lessons ready2 modulesabout 2.8 hours34 quiz questions
Your progress0 / 9

Module 1

Security basics

Beginner
  1. 1Authentication vs AuthorizationWho are you, and what may you do? See 401 vs 403 on a small API, then follow an OAuth flow and an OpenID Connect login to see which token answers which question.
  2. 2You pushed a secret to Git. Now what?Deleting the file is not enough. Find the leak, rotate the key, rewrite history, and stop it happening again.

Module 2

Offence and defence

Intermediate
  1. 3What is penetration testing?An authorised attack, done to find weaknesses before criminals do: recon, scan, prove and report.
  2. 4The OWASP Top 10The ten most common ways web apps get hacked. Break a small shop four different ways (leaked file, SQL injection, access control, XSS), then fix each one and watch the attack stop.
  3. 5Firewalls and security groupsClose every port you do not serve. Scan a server like an attacker, shut the open database and SSH ports, allow SSH only from your own address, and let the database talk only to the web tier.
  4. 6SSH hardeningReplace passwords with keys, turn off password and root logins, limit who may connect, and prove that the old ways no longer work.
  5. 7Secrets managementFind a password and an API key hard-coded in a project, scan for leaks, move them out of the code into the environment, and then into AWS Secrets Manager with versions and rotation.
  6. 8HTTPS certificates and Let's EncryptTurn an HTTP site into HTTPS with a free certificate: open the right ports, run certbot, check the certificate, add the redirect, and prove that renewal is automatic.
  7. 9Least privilege and IAMShrink the blast radius: replace an administrator key in a CI pipeline with a policy that allows only the deployment, and remove the old access keys that nobody uses.
✓Final examTest yourself on the whole Security trackQuestions drawn from every lesson, a new mix each time. Score 70% to pass. Start the exam →

New videos come out on YouTube @deployskool. Lessons marked "video coming soon" are complete already: the video is the bonus.