AWS Bootcamp - Security

AWS CLI (Command Line Interface)

A tool that enables you to interact with AWS services using commands in shell

AWS CloudShell

A browser-based shell that makes it easy to securely manage, explore, and interact with your AWS resources

AWS CloudTrail

A service that provides audit trail for all services and records API calls made within your account

Amazon CloudWatch

A web service that enables you to monitor metrics, configure alarm actions, collect log files, and react to/trigger events related to metrics and EC2 instances

AWS Config

A service that helps with auditing and recording compliance of your AWS resources and records configurations and changes over time

AWS Management Console

Web-based interface for accessing and managing AWS services

AWS Artifact

A portal that provides customers with on-demand access to AWS compliance documentation and AWS agreements

AWS Audit Manager

Helps you continuously audit your AWS usage to simplify how you assess risk and compliance with regulations and industry standards

AWS Certificate Manager

A service that lets you easily provision, manage, and deploy SSL/TLS certificates for use with AWS services

AWS CloudHSM (Hardware Security Module)

Enables you to easily generate and use your encryption keys on the AWS Cloud

Amazon Cognito

Let's you easily add user sign-up and sign-in to your mobile and web apps

Amazon Detective

Analyzes, investigates, and quickly identifies the root cause of security issues or suspicious activities (using ML and graphs)

AWS Directory Service

A managed service offering that provides directories that contain information about your organization, including users, groups, computers, and other resources

AWS Firewall Manager

Allows you to manage security rules in all accounts of an AWS Organization

Amazon GuardDuty

A service that provides intelligent threat detection for your AWS infrastructure and resources

AWS IAM (Identity and Access Management)

Used to manage:

Users, Groups, Access Policies, Roles, User Credentials, User Password Policies, MFA, API Keys (CLI)

AWS IAM Identity Center

Single Sign-On for all AWS accounts in AWS Organizations

Amazon Inspector

An automated security assessment service for EC2 instances, container images, Lambda Functions, and other applications deployed

AWS KMS (Key Management Service)

A service in which AWS manages encryption keys for us

Amazon Macie

A fully managed data security and data privacy service that uses machine learning and pattern matching to discover and protect your sensitive data in AWS

AWS Network Firewall

A managed service that makes it easy to deploy essential network protections for all of your Amazon Virtual Private Clouds (VPCs).

AWS Secrets Manager

Service that manages secrets (such as passwords, keys, tokens, etc...) used in your custom applications on AWS; also supports auto-rotation of credentials on supported AWS services

AWS Security Hub

A central security tool to manage security across several AWS accounts and automate security checks

AWS Shield Standard

Protects against DDOS attack for your website and applications, for all customers at no additional costs

AWS Shield Advanced

24/7 premium DDoS protection, protects against more sophisticated attacks

AWS WAF (Web Application Firewall)

A web application firewall that helps protect your web applications from common web exploits that could affect application availability, compromise security, or consume excessive resources

AWS Compliance

Empowers customers to understand the robust controls in place at AWS to maintain security and data protection in the AWS Cloud

AWS Security Center

Full of information, tools, and resources dedicated to the security best practices that are used in AWS

AWS Security Blog

A security blog of AWS security articles to keep customers up to date

AWS SDKs (Software Development Kits)

Software development kits for building applications on AWS

AWS Shared Responsibility Model

While AWS manages security OF the cloud, Customers manage security IN the cloud

AWS Managed VPN

A managed client-based VPN service that enables you to securely access your AWS resources or your on-premises network