AWS Security Tools
1. AWS Identity and Access Management (IAM):
Create and manage AWS users and groups, and assign permissions to allow or deny access to specific AWS resources.
2. AWS CloudTrail:
Helps with compliance auditing, governance, and security analysis by tracking changes and activities across your AWS infrastructure.
3. AWS Config:
Helps assess compliance with policies, troubleshoot configuration issues, and maintain a secure and compliant infrastructure.
4. Amazon GuardDuty:
Analyzes data from various sources, such as VPC Flow Logs, CloudTrail, and DNS logs, to detect threats like unauthorized access, malware, and unusual network activity.
5. AWS WAF (Web Application Firewall):
Define conditions based on IP addresses, HTTP headers, or request attributes to block or allow traffic before it reaches your applications.
6. Amazon Inspector:
Automatically assessing them for vulnerabilities, deviations from best practices, and potential security issues.
7. AWS Shield:
Managed Distributed Denial of Service (DDoS) protection with Standard and Advanced tiers with features like automatic traffic filtering, real-time attack detection, and protection against application-layer attacks.
8. Amazon Macie:
Helps identify and protect against data leaks, data exposure risks, and unauthorized access to sensitive information.
9. Amazon Detective:
Collects and analyses log data from AWS resources, providing visualizations and insights to help you understand the root cause and impact of security incidents.