AWS security services mindmap

AWS security services

• Shared responsibility model
  • Security of the cloud: AWS protects the infrastructure that runs its services
  • Security in the cloud: The customer secures data, identities, configuration and network settings
• Identity and access management
  • AWS Identity and Access Management: Users, roles and policies for access to AWS
  • AWS IAM Identity Center: Workforce sign-in across accounts and applications
  • AWS Organizations: Central account management, SCPs and RCPs
  • Amazon Cognito: Customer identity for web and mobile apps
  • Amazon Verified Permissions: Fine-grained application authorization with Cedar policies
  • AWS Resource Access Manager: Share resources across accounts
• Detection
  • Amazon GuardDuty: Threat detection from logs and runtime activity
  • AWS Security Hub: Central view of findings and security posture
  • Amazon Inspector: Vulnerability scanning for EC2, container images and Lambda
  • Amazon Detective: Investigate the root cause of findings with behavior graphs
  • AWS Config: Resource configuration history and compliance rules
  • AWS CloudTrail: Record of API activity across accounts
  • Amazon Security Lake: Security data lake in the OCSF format
• Infrastructure protection
  • AWS WAF: Web application firewall for CloudFront, ALB, API Gateway and more
  • AWS Shield: DDoS protection; Standard is automatic, Advanced adds response support
  • AWS Network Firewall: Managed stateful firewall and IPS for VPCs
  • AWS Firewall Manager: Central firewall policies across accounts
  • AWS Verified Access: VPN-less access to corporate apps based on identity and device
  • AWS Systems Manager: Patching and shell access without open inbound ports
• Data protection
  • AWS Key Management Service: Create and control encryption keys
  • AWS CloudHSM: Single-tenant hardware security modules
  • AWS Secrets Manager: Store and rotate secrets
  • AWS Certificate Manager: Public and private TLS certificates
  • Amazon Macie: Discover sensitive data in Amazon S3
• Incident response
  • AWS Security Incident Response: Triage, investigate and contain incidents with AWS responders
  • AWS Elastic Disaster Recovery: Recover servers into AWS after an outage or disaster
  • AWS Backup: Central backups with vault lock
• Compliance
  • AWS Artifact: Download AWS compliance reports and agreements
  • AWS Audit Manager: Collect audit evidence against frameworks
  • AWS Control Tower: Landing zone with preventive, detective and proactive controls
• Partners and services: Help to deploy and run security solutions
  • AWS Marketplace: Security software from AWS Partners, billed through AWS
  • AWS Security Competency Partners: Partners validated for security expertise
  • AWS Professional Services: AWS experts who help design and deploy
  • AWS Managed Services: AWS operates security tooling for you
• Learning and guidance
  • AWS Security Reference Architecture: How to deploy the security services across a multi-account setup
  • Security Pillar of the Well-Architected Framework: Design principles and best practices
  • AWS Security Blog: News, how-tos and deep dives
  • AWS Skill Builder: Free and paid security training