DevSecOps on AWS: Defend Against AI Bots & LLM Scrapers

DevSecOps & Cloud Security

Build a multi-layered AWS defense against AI bots and LLM scrapers using CloudFront, WAF, and Lambda@Edge. Learn to deploy, analyze, and enforce data-driven bot policies with Terraform in real-world, hands-on labs.

Interested in this course? Email us at [email protected]

Course curriculum

1. Segment 00 - Reading: Welcome to the Course: Course Overview
2. Segment 01 - The AI Bot Problem: Definition and Strategic Outlook
3. Segment 02 - Lab Environment Overview
4. Segment 03 - Multi-Layered Infrastructure Strategy Components (Part 1)
5. Segment 04 - Multi-Layered Infrastructure Strategy Components (Part 2)
1. Segment 05 - Flask App: Local Environment
2. Segment 06 - Flask App: Code Overview
3. Segment 07 -Terraform Installation with tfenv
4. Segment 08 - AWS Profile and Terraform Configuration
5. Segment 09 - Build Docker Image and Push to AWS ECR
6. Segment 10 - Reading: Best Practices for Using the Terraform AWS Provider
7. Segment 11 - Hands-On-Learning: Local Environment Verification and ECR Push
8. Segment 12 - Roleplay Activity : Onboarding a New Team Member: Explaining the Local Dev Environment
9. Segment 13 - Quiz : Flask Application and Tooling Setup
1. Segment 14 - Running Terraform Scripts: Essential Introduction
2. Segment 15 - Running Terraform Scripts: Essential Introduction
3. Segment 16 - Domain Delegation and ACM Terraform Module
4. Segment 17 - Domain Delegation and ACM Terraform Module
5. Segment 18 -Important Note: Project Name Prefix Differences
1. Segment 19 - Flask Application on EC2 Using Auto Scaling Group
2. Segment 20 - Add EC2 to AWS ALB as Target Group
3. Segment 21 - EC2 in the AWS Console and SSH Login
1. Segment 22 - Amazon CloudFront Base Components
2. Segment 23 - CloudFront and WAF Terraform Module (Part 1: CloudFront)
3. Segment 24 - CloudFront and WAF Terraform Module (Part 2: WAF)
4. Segment 25 - CloudFront and WAF: AWS Console Overview and Maintenance Mode
5. Segment 26 - Reading : Deploy the Security Automations for AWS WAF Solution Using Terraform
6. Segment 27 - Auto-Scaling Surprises
7. Segment 28 - AWS Fargate and Commercial Practice Example
8. Segment 29 - Hands-On-Learning: Full AWS Infrastructure Deployment
9. Segment 30 - Roleplay : Infrastructure Design Review: Public vs. Private Subnets
10. Segment 31 - Quiz : CloudFront, WAF, and Auto-Scaling Realities
1. Segment 32 - How CloudFront Works
2. Segment 33 - Degraded Content Strategy (Part 1)
3. Segment 34 - Degraded Content Strategy (Part 2)
1. Segment 35 - Routing Bots with Lambda@Edge (Part 1)
2. Segment 36 - Routing Bots with Lambda@Edge (Part 2)
3. Segment 37 -Caching Surprises
4. Segment 38 - Tagging Bot Requests with CloudFront Function
5. Segment 39 : Reading: Customize at the Edge with Lambda@Edge
1. Segment 40 - Missing Assets Issue (Part 1)
2. Segment 41 -Missing Assets Issue (Part 2)
3. Segment 42 - CloudFront Origin Shield
4. Segment 43 - Immutable Asset Deployments
5. Segment 44 - Simplified Content with Inline Assets
6. Segment 45 - Degraded Content and Immutable Assets: Key Takeaways
7. Segment 46 - Hands-On-Learning: Implement Degraded Content Routing and Cache Separation
8. Segment 47 - Roleplay Activity: Choosing the Right Degraded Content Strategy
9. Segment 48 - Quiz : Solving the Missing Assets Problem
1. Segment 49 - What Is WAF and How It Works?
2. Segment 50 - WAF Black and White Lists in AI Bots Context
3. Segment 51 - WAF GEO-Country Rule and Bot Traffic
4. Segment 52 -Athena Quick Start: Extracting Real Bot Geo Data from WAF Logs
1. Segment 53 -JA4-Based Rate Limiting: Statistical Baseline and First-Stage Filtering (Part 1)
2. Segment 54 - JA4-Based Rate Limiting: Statistical Baseline and First-Stage Filtering (Part 2)
3. Segment 55 - Granular Rate Rules: URL-Scoped Throttling in WAF
1. Segment 56 -AWS Managed Rules: Reputation Signals as a Bot Filter Layer
2. Segment 57 - AWS WAF Intelligent Bot Mitigation: Foundation and Theory
3. Segment 58 - Turning Bot Control ON (COMMON) and What It Emits
4. Segment 59 - Preparing the App Layer for Bot Control TARGETED
5. Segment 60 - Bot Control Dashboards in Practice and the Power of Bot Traffic Labels
1. Segment 61 -Bot Identification Report (Athena and Real Data)
2. Segment 62 - Concrete Bot Strategy Implementation (Part 1)
3. Segment 63 - Concrete Bot Strategy Implementation (Part 2)
4. Segment 64 - Reading: Managing AI Bots with AWS WAF and Enhancing Security
5. Segment 65 - Hands-On-Learning: Build a Bot Identification Report and Enforce a Policy
6. Segment 66 - Roleplay Activity : Presenting Your Bot Defense Strategy to the CISO
7. Segment 67 - Project: Architect a Complete Bot Defense Solution for a Growing E-Commerce Platform
8. Segment 68 - Quiz : Bot Identification and Strategic Policy Implementation

About this course

Free
69 lessons
3.5 hours of video content

Discover your potential, starting today

Enroll today

DevSecOps & Cloud Security

Course curriculum

Module 1: The New Bot Economy and Defense Strategy

Module 2: Flask Application and Tooling Setup

Module 3: Core Infrastructure with Terraform

Module 4: Deploying the Flask Application on EC2

Module 5: CloudFront, WAF, and Auto-Scaling Realities

Module 6: CloudFront Caching and Degraded Content

Module 7: Lambda@Edge and Cache Separation

Module 8: Solving the Missing Assets Problem

Module 9: WAF Fundamentals and Basic Controls

Module 10: Advanced Rate Limiting with JA4 and URL Scope

Module 11: Managed Rules and Bot Control: From Theory to Practice

Module 12: Bot Identification and Strategic Policy Implementation

About this course

Discover your potential, starting today