К содержимому
learnspaceYOUR NEXT CHAPTER
ПРОСТРАНСТВО ОБУЧЕНИЯ
ГлавнаяКаталог курсовМоё обучениеCoursera

Знания без границ

Учитесь у лучших университетов и компаний мира.

Открыть Coursera
Интеграция
Пространство университета
Моё пространствоСтраница курса
↵
ЯЛичный кабинетСтудент
© 2026 LearnSpaceКаждый день — возможность узнать больше.Помощь
DevSecOps & Cloud Security · LearnSpace
Назад в каталог
courseraIT и технологии

DevSecOps & Cloud Security

Курс от STARWEAVER
Продвинутый≈ 9.7 чАнглийский
О курсеНавыкиПрограммаПреподаватели

О курсе

Protect modern web applications from AI crawlers, LLM scrapers, and malicious bot traffic with a practical, AWS-native DevSecOps workflow. In this advanced cloud security course, you will build and secure a production-style web delivery stack using Terraform, AWS WAF, CloudFront, Lambda@Edge, EC2, ALB, and Amazon Athena. Starting from a simple Flask application, you will deploy a complete AWS environment as code, then implement multi-layered bot mitigation strategies such as cache separation for bots and humans, degraded content delivery, edge-based traffic routing, and advanced AWS WAF Bot Control. You will also work with JA4 TLS fingerprinting, managed rules, IP and GEO controls, and Athena-based log analysis to create a data-driven bot policy, applying cloud-native security practices throughout. By the end, you will be able to design and enforce a scalable AWS cloud security architecture for bot protection that reduces origin load, improves resilience, and helps defend against AI-driven scraping and automated abuse in real-world environments.

Навыки, которые вы освоите

Cloud SecurityAmazon Web ServicesTerraformDevSecOpsFlask (Web Framework)FirewallLoad BalancingAnalysisAWS CloudFormationCloud Computing ArchitectureApplication DeploymentScalabilityInfrastructure as Code (IaC)Cloud InfrastructureAmazon Elastic Compute CloudArtificial Intelligence

Программа курса

4 модулей · 77 учебных материалов

01 The AI Bot Threat Landscape and Local Development Setup16 материалов

Lesson 1: The New Bot Economy and Defense Strategy

Navigating the AI Bot Threat LandscapeDIALOGUEWelcome to the Course: Course OverviewЧтениеThe AI Bot Problem: Definition and Strategic Outlook ВидеоLab Environment Overview Видео

Учитесь у экспертов

Sergii Demianchuk

CTO/System Architect

Starweaver

Global Leaders in Professional & Technology Education

DevSecOps & Cloud Security
В каталоге вашей программы

Инвестируйте в себя

Новые знания — в удобное для вас время.

Начать на Coursera

Обучение откроется на Coursera
в новой вкладке

Обучение на Coursera

≈ 9.7 ч

4 модулей

Язык: Английский

Часть программы вашего университета
Multi-Layered Infrastructure Strategy Components (Part 1) Видео
Multi-Layered Infrastructure Strategy Components (Part 2) Видео

Lesson 2: Flask Application and Tooling Setup

Flask App: Local Environment ВидеоFlask App: Code Overview ВидеоTerraform Installation with tfenv ВидеоAWS Profile and Terraform ConfigurationВидеоBuild Docker Image and Push to AWS ECR ВидеоBest Practices for Using the Terraform AWS Provider ЧтениеKeeping Development and Production Environments in SyncОбсуждениеHands-On-Learning: Local Environment Verification and ECR PushВзаимная проверкаOnboarding a New Team Member: Explaining the Local Dev EnvironmentDIALOGUEThe AI Bot Threat Landscape and Local Development SetupЗадание
02Production Infrastructure Deployment on AWS20 материалов

Lesson 1: Core Infrastructure with Terraform

Designing and Justifying AWS Production Infrastructure DIALOGUERunning Terraform Scripts: Essential Introduction ВидеоPre-Init and Network Terraform Modules ВидеоDomain Delegation and ACM Terraform Module ВидеоALB Terraform Module ВидеоImportant Note: Project Name Prefix DifferencesВидео

Lesson 2: Deploying the Flask Application on EC2

Flask Application on EC2 Using Auto Scaling Group ВидеоAdd EC2 to AWS ALB as Target Group ВидеоEC2 in the AWS Console and SSH Login Видео

Lesson 3: CloudFront, WAF, and Auto-Scaling Realities

Amazon CloudFront Base Components ВидеоCloudFront and WAF Terraform Module (Part 1: CloudFront) ВидеоCloudFront and WAF Terraform Module (Part 2: WAF) ВидеоCloudFront and WAF: AWS Console Overview and Maintenance Mode ВидеоDeploy the Security Automations for AWS WAF Solution Using Terraform ЧтениеAuto-Scaling Surprises Видео
03Intelligent Traffic Routing and CloudFront Optimization19 материалов

Lesson 1: CloudFront Caching and Degraded Content

Defending Content Delivery: Caching, Routing, and the Missing Assets ProblemDIALOGUEHow CloudFront Works ВидеоDegraded Content Strategy (Part 1) ВидеоDegraded Content Strategy (Part 2) Видео

Lesson 2: Lambda@Edge and Cache Separation

Routing Bots with Lambda@Edge (Part 1) ВидеоRouting Bots with Lambda@Edge (Part 2) ВидеоCaching Surprises ВидеоTagging Bot Requests with CloudFront Function ВидеоCustomize at the Edge with Lambda@Edge Чтение

Lesson 3: Solving the Missing Assets Problem

Missing Assets Issue (Part 1) ВидеоMissing Assets Issue (Part 2) ВидеоCloudFront Origin Shield ВидеоImmutable Asset Deployments ВидеоSimplified Content with Inline Assets ВидеоDegraded Content and Immutable Assets: Key Takeaways Видео
04Advanced WAF Defenses, Bot Control, and Strategic Policy Enforcement22 материалов

Lesson 1: WAF Fundamentals and Basic Controls

From WAF Rules to a Data-Driven Strategic Bot PolicyDIALOGUEWhat Is WAF and How It Works ВидеоWAF Black and White Lists in AI Bots Context ВидеоWAF GEO-Country Rule and Bot Traffic ВидеоAthena Quick Start: Extracting Real Bot Geo Data from WAF Logs Видео

Lesson 2: Advanced Rate Limiting with JA4 and URL Scope

JA4-Based Rate Limiting: Statistical Baseline and First-Stage Filtering (Part 1) ВидеоJA4-Based Rate Limiting: Statistical Baseline and First-Stage Filtering (Part 2) ВидеоGranular Rate Rules: URL-Scoped Throttling in WAF Видео

Lesson 3: Managed Rules and Bot Control: From Theory to Practice

AWS Managed Rules: Reputation Signals as a Bot Filter Layer ВидеоAWS WAF Intelligent Bot Mitigation: Foundation and Theory ВидеоTurning Bot Control ON (COMMON) and What It Emits ВидеоPreparing the App Layer for Bot Control TARGETED ВидеоBot Control Dashboards in Practice and the Power of Bot Traffic Labels Видео

Lesson 4: Bot Identification and Strategic Policy Implementation

Bot Identification Report (Athena and Real Data) ВидеоConcrete Bot Strategy Implementation (Part 1) ВидеоConcrete Bot Strategy Implementation (Part 2) ВидеоHow Would You Protect High-Value Pages on a Limited Budget?ОбсуждениеHands-On-Learning: Build a Bot Identification Report and Enforce a PolicyВзаимная проверкаPresenting Your Bot Defense Strategy to the CISODIALOGUE
AWS Fargate and Commercial Practice Example Видео
Public Subnets vs. Private Subnets for EC2 InstancesОбсуждение
Hands-On-Learning: Full AWS Infrastructure DeploymentВзаимная проверка
Infrastructure Design Review: Public vs. Private Subnets DIALOGUE
Production Infrastructure Deployment on AWSЗадание
Detecting Cache Contamination Before Users Are AffectedОбсуждение
Hands-On-Learning: Implement Degraded Content Routing and Cache SeparationВзаимная проверка
Choosing the Right Degraded Content Strategy DIALOGUE
Intelligent Traffic Routing and CloudFront OptimizationЗадание
Project: Architect a Complete Bot Defense Solution for a Growing E-Commerce Platform Взаимная проверка
Advanced WAF Defenses, Bot Control, and Strategic Policy EnforcementЗадание
Managing AI Bots with AWS WAF and Enhancing Security Чтение