# Key AWS services
<a name="key-aws-services"></a>
+  **Security foundations** 
  +  [AWS Control Tower](https://aws.amazon.com/controltower/): Set up and govern a secure, multi-account AWS environment 
  +  [AWS Organizations](https://aws.amazon.com/organizations/): Centrally manage your environment as you scale your AWS resources 
  +  [AWS Config](https://aws.amazon.com/config/): Assess, audit, and evaluate configurations of your resources 
+  **Identity and access management** 
  +  [AWS Identity and Access Management (IAM)](https://aws.amazon.com/iam/): Control users' access to and usage of AWS. Create and manage users and groups and grant or deny access. Enforce strong authorization and authentication. 
  +  [AWS Identity Center](https://aws.amazon.com/iam/identity-center/): Centrally manage workforce access to multiple AWS accounts and applications 
  +  [Amazon Cognito](https://aws.amazon.com/cognito/): Implement secure, frictionless customer identity and access management that scales 
  +  [AWS Secrets Manager](https://aws.amazon.com/secrets-manager/): Quickly rotate, manage and retrieve database credentials, API keys, and other secrets through their lifecycle 
+  **Detection** 
  +  [AWS Security Hub CSPM](https://aws.amazon.com/security-hub/): Automate AWS security checks and centralize security alerts 
  +  [Amazon GuardDuty](https://aws.amazon.com/guardduty/): Protect your AWS accounts with intelligent threat detection 
  +  [Amazon CodeGuru:](https://aws.amazon.com/codeguru/) Automate code reviews and optimize application performance with ML-powered recommendations 
  +  [Amazon Inspector](https://aws.amazon.com/inspector/): Automated and continual vulnerability management at scale 
  +  [Amazon CloudWatch](https://aws.amazon.com/cloudwatch/): Observe and monitor resources and applications on AWS, on premises, and on other clouds 
+  **Infrastructure protection** 
  +  [Amazon VPC](https://aws.amazon.com/vpc/): Define and launch AWS resources in a logically isolated virtual network 
  +  [AWS Network Firewall:](https://aws.amazon.com/network-firewall/) Deploy network firewall security across your VPCs 
  +  [AWS Verified Access](https://aws.amazon.com/verified-access/): Provide secure access to corporate applications without a VPN 
  +  [AWS WAF](https://aws.amazon.com/waf/): Protect your web applications from common exploits 
+  **Data protection** 
  +  [AWS CloudTrail:](https://aws.amazon.com/cloudtrail/) Track user activity and API usage 
  +  [AWS Key Management Service (KMS)](https://aws.amazon.com/kms/): Create and control keys used to encrypt or digitally sign your data 
  +  [Amazon Macie](https://aws.amazon.com/macie/): Discover and protect your sensitive data at scale 
  +  [AWS Backup](https://aws.amazon.com/backup/): Centrally manage and automate data protection 
  +  [Amazon Glacier](https://aws.amazon.com/s3/storage-classes/glacier/): Long-term, secure, durable storage classes for data archiving at the lowest cost and milliseconds access 
+  **Incident response** 
  +  [AWS Lambda](https://aws.amazon.com/lambda/): Run code without thinking about servers or clusters 
  +  [AWS Audit Manager:](https://aws.amazon.com/audit-manager/) Continuously audit your AWS usage to simplify how you assess risk and compliance with regulations and industry standards. 
  +  [AWS GameDay](https://aws.amazon.com/gameday/): Fun, gamified, hands-on learning 
  +  [AWS Compliance Center:](https://aws.amazon.com/financial-services/security-compliance/compliance-center/?country-compliance-center-cards.sort-by=item.additionalFields.headline&country-compliance-center-cards.sort-order=asc&awsf.country-compliance-center-master-filter=%2Aall) Research cloud-related regulatory requirements