Key AWS services
-
Security foundations
-
AWS Control Tower
: Set up and govern a secure, multi-account AWS environment -
AWS Organizations
: Centrally manage your environment as you scale your AWS resources -
AWS Config
: Assess, audit, and evaluate configurations of your resources
-
-
Identity and access management
-
AWS Identity and Access Management (IAM)
: Control users' access to and usage of AWS. Create and manage users and groups and grant or deny access. Enforce strong authorization and authentication. -
AWS Identity Center
: Centrally manage workforce access to multiple AWS accounts and applications -
Amazon Cognito
: Implement secure, frictionless customer identity and access management that scales -
AWS Secrets Manager
: Quickly rotate, manage and retrieve database credentials, API keys, and other secrets through their lifecycle
-
-
Detection
-
AWS Security Hub CSPM
: Automate AWS security checks and centralize security alerts -
Amazon GuardDuty
: Protect your AWS accounts with intelligent threat detection -
Amazon CodeGuru:
Automate code reviews and optimize application performance with ML-powered recommendations -
Amazon Inspector
: Automated and continual vulnerability management at scale -
Amazon CloudWatch
: Observe and monitor resources and applications on AWS, on premises, and on other clouds
-
-
Infrastructure protection
-
Amazon VPC
: Define and launch AWS resources in a logically isolated virtual network -
AWS Network Firewall:
Deploy network firewall security across your VPCs -
AWS Verified Access
: Provide secure access to corporate applications without a VPN -
AWS WAF
: Protect your web applications from common exploits
-
-
Data protection
-
AWS CloudTrail:
Track user activity and API usage -
AWS Key Management Service (KMS)
: Create and control keys used to encrypt or digitally sign your data -
Amazon Macie
: Discover and protect your sensitive data at scale -
AWS Backup
: Centrally manage and automate data protection -
Amazon Glacier
: Long-term, secure, durable storage classes for data archiving at the lowest cost and milliseconds access
-
-
Incident response
-
AWS Lambda
: Run code without thinking about servers or clusters -
AWS Audit Manager:
Continuously audit your AWS usage to simplify how you assess risk and compliance with regulations and industry standards. -
AWS GameDay
: Fun, gamified, hands-on learning -
AWS Compliance Center:
Research cloud-related regulatory requirements
-