AWS cloud security

• Homepage: https://aws.amazon.com/security/

AWS security services

2020

• AWS Audit Manager (Dec, 2020) service to assess risk and compliance with regulations. Two calendar months free trial
• AWS Network Firewall (Nov 2020)
• Amazon Fraud Detector (Jul 2020) service to detect fraudulent online payments
• Amazon Detective (Mar 2020) service to analyze, investigate, and identify the root cause of potential security issues or suspicious activities. 30-day free trial
• S3 protection for Amazon GuardDuty (Jul 2020)

2019

• AWS IAM Access Analyzer (Dec 2019)
• AWS Security Hub (Jun 2019 ): 30-day trial period

2018

• AWS Secrets Manager (April 2018)
• AWS Firewall Manager (April 2018)

2017

• Amazon GuardDuty (Nov 2017) threat detection : 30 days https://aws.amazon.com/guardduty/pricing/
• Amazon Macie (Aug 2017) : 30 day free trial

2016

• AWS Shield

2015

• AWS WAF (October 2015)
• Amazon Inspector (October 2015) vulnerability scanner for ECS and ECR

2014

• AWS Key Management Service (KMS) (Nov 2014)

2013

• AWS CloudTrail (2013): AWS CloudTrail Insights (2019): always free
• AWS IAM: AWS IAM Access Analyzer (Dec 2019)

2012

• AWS Trusted Advisor includes security recommendations

Related terms

• Compliance, Governance
• PCI DSS, CDE
• CIS AWS Foundations Benchmark controls
• Cloudsploit
• Security Group
• Amazon Cognito
• AWS GDPR
• AWS Certified Security - Specialty: AWS data protection mechanisms
• Amazon databases, AWS networking
• AWS Trusted Advisor
• Hype cycle for cloud security
• Configure MFA on AWS

Activities

• Read AWS security blog: https://aws.amazon.com/blogs/security/
• Read https://aws.amazon.com/blogs/security/introducing-the-security-at-the-edge-core-principles-whitepaper/
• View: https://reinforce.awsevents.com/keynote/?trk=direct
• https://wellarchitectedlabs.com/security/
• AWS: Denies access to AWS based on the source IP

See also

• AWS security, AWS Security Hub, AWS CloudTrail, Amazon GuardDuty, Amazon Detective, AWS WAF, AWS Audit Manager, Amazon Fraud Detector, Cloudsploit, AWS Certified Security - Specialty, AWS Security Assurance Services, AWS GDPR, Amazon Inspector, AWS Network Firewall, Zelkova
• Cloud security, PTaaS, AWS security, CASB, Cloud Security Alliance (CSA), Zscaler Cloud Protection, CrowdStrike, CSPM, CIEM, Prowler
• AWS, Amazon Managed Services, AWS Management & Governance, computing, security, networking, AWS compliance, AWS Outposts AWS Free Tier, AWS certifications, AWS Trusted Advisor, AWS Systems Manager, AWS Config, IAM Access Analyzer, AWS Cost Explorer, AWS Cost Management, AWS Budgets, AWS Organizations, AWS dev: (CodeStar, Cloud9), AWS Partner Network (APN), AWS Resource Access Manager, AWS Quick Starts, AWS Global Accelerator, AWS Elemental MediaStore, AWS Enterprise support, AWS support, AWS Professional Services Consultants, AWS Cloud Map, AWS Marketplace, AWS CLI, AWS Management Console, AWS acceptable use policy, amazonaws.com, Quotas, AWS Support plans, AWS Resource Explorer, AWS Managed Services (AMS), AWS savings, AWS Nitro System, AWS Activate, Serverless, AWS timeline

https://aws.amazon.com/about-aws/whats-new/2020/12/aws-announces-aws-audit-manager/

https://aws.amazon.com/blogs/aws/amazon-fraud-detector-is-now-generally-available/

https://aws.amazon.com/about-aws/whats-new/2020/03/amazon-detective-is-now-generally-available/

https://aws.amazon.com/about-aws/whats-new/2019/06/aws-security-hub-now-generally-available/

https://aws.amazon.com/about-aws/whats-new/2018/04/introducing-aws-firewall-manager/

https://aws.amazon.com/about-aws/whats-new/2017/11/announcing-amazon-guardduty-intelligent-threat-detection/

https://aws.amazon.com/blogs/security/aws-announces-amazon-macie/