DevSecOps & Cloud Security
By External Provider
About this course
Protect modern web applications from AI crawlers, LLM scrapers, and malicious bot traffic with a practical, AWS-native DevSecOps workflow. In this advanced course, you will build and secure a production-style web delivery stack using Terraform, AWS WAF, CloudFront, Lambda@Edge, EC2, ALB, and Amazon Athena. Starting from a simple Flask application, you will deploy a complete AWS environment as code, then implement multi-layered bot mitigation strategies such as cache separation for bots and humans, degraded content delivery, edge-based traffic routing, and advanced AWS WAF Bot Control. You will also work with JA4 TLS fingerprinting, managed rules, IP and GEO controls, and Athena-based log analysis to create a data-driven bot policy. By the end, you will be able to design and enforce a scalable AWS bot protection architecture that reduces origin load, improves resilience, and helps defend against AI-driven scraping and automated abuse in real-world environments.
What you will learn
- Analyze the AI bot threat landscape and set up a local Flask application with Terraform tooling.
- Deploy production AWS infrastructure with Terraform: VPC, ALB, CloudFront, WAF, and EC2 auto scaling groups.
- Implement intelligent traffic routing, cache separation, and degraded content with CloudFront and Lambda@Edge.
- Configure advanced WAF protections, analyze logs with Athena, and enforce a data-driven strategic bot policy.