Common AWS services to assist in the detection and mitigation of data breaches

Amazon VPC, AWS Network Firewall

Use _ controls (for example, network ACLs and security groups) and _ to configure inbound and outbound network access rules.

AWS IAM

Use _ to configure who can authenticate and access your applications, resources, and data.

AWS KMS

Use _ to encrypt your data, to prevent data breaches.

AWS Secrets Manager

Use _ to keep your secrets (access keys, passwords, credentials, and others) safe from data breaches.

AWS CloudTrail

Use _ to detect API activities (for users, computers, service accounts, and so on) that might indicate a data breach.

Amazon CloudWatch

Use _ to log and alert suspicious activities that pass certain thresholds (such as multiple failed login attempts).

Amazon GuardDuty

Use _ to detect data breaches.

AWS VPC Flow Logs

Use _ to review network activity that might indicate data breaches.

AWS Config

Use _ to detect configuration changes in your environment and cloud resources.

Amazon Detective

Use _ to detect the root cause of a data breach.

AWS Backup

Use _ to recover your environment after a data breach.