Overview Security Services Compliance Offerings Data Protection Learning Resources Partners

Security, Identity, and Compliance on AWS

Secure your workloads and applications in the cloud

Data protection

Identity & access management

Network & application protection

AWS provides services that help you protect your data, accounts, and workloads from unauthorized access. AWS data protection services provide encryption and key management and threat detection that continuously monitors and protects your accounts and workloads.

AWS Identity Services enable you to securely manage identities, resources, and permissions at scale. With AWS, you have identity services for your workforce and customer-facing applications to get started quickly and manage access to your workloads and applications.

Learn more »

Network and application protection services enable you to enforce fine-grained security policy at network control points across your organization. AWS services help you inspect and filter traffic to prevent unauthorized resource access at the host-, network-, and application-level boundaries.

Learn more »

Threat detection & continuous monitoring

Compliance & data privacy

AWS identifies threats by continuously monitoring the network activity and account behavior within your cloud environment.

AWS gives you a comprehensive view of your compliance status and continuously monitors your environment using automated compliance checks based on the AWS best practices and industry standards your organization follows.

Data protection

Threat detection & continuous monitoring

AWS identifies threats by continuously monitoring the network activity and account behavior within your cloud environment.

Identity & access management

Learn more »

Compliance & data privacy

Network and application protection

Learn more »

AWS Security, Identity, & Compliance services

Category

Use cases

AWS service

Identity & access management

Securely manage access to services and resources

AWS Identity & Access Management (IAM)

Cloud single-sign-on (SSO) service

AWS IAM Identity Center (successor to AWS SSO)

Identity management for your apps

Amazon Cognito

Managed Microsoft Active Directory

AWS Directory Service

Simple, secure service to share AWS resources

AWS Resource Access Manager

Central governance and management across AWS accounts

AWS Organizations

Detection

Automate AWS security checks and centralize security alerts

AWS Security Hub

Protect AWS accounts with intelligent threat detection

Amazon GuardDuty

Automate vulnerability management

Amazon Inspector

Record and evaluate configurations of your AWS resources

AWS Config

Track user activity and API usage

AWS CloudTrail

Security management for IoT devices

AWS IoT Device Defender

Network and application protection

Network security

AWS Network Firewall

DDoS protection

AWS Shield

Filter and control outbound DNS traffic for your VPCs

Amazon Route 53 Resolver DNS Firewall

Filter malicious web traffic

AWS Web Application Firewall (WAF)

Central management of firewall rules

AWS Firewall Manager

Data protection

Discover and protect your sensitive data at scale

Amazon Macie

Key storage and management

AWS Key Management Service (KMS)

Hardware based key storage for regulatory compliance

AWS CloudHSM

Provision, manage, and deploy public and private SSL/TLS certificates

AWS Certificate Manager

Rotate, manage, and retrieve secrets

AWS Secrets Manager

Incident response

Investigate potential security issues

Amazon Detective

Scalable, cost-effective application recovery to AWS

AWS Elastic Disaster Recovery

Compliance

No cost, self-service portal for on-demand access to AWS’ compliance reports

AWS Artifact

Continuously audit your AWS usage to simplify how you assess risk and compliance

AWS Audit Manager

AWS Security, Identity, & Compliance services

Category	Use cases	AWS service
Identity & access management	Manage user access and encryption keys	AWS Identity & Access Management (IAM)
	Cloud single-sign-on (SSO) service	AWS IAM Identity Center (successor to SSO)
	Identity management for your apps	Amazon Cognito
	Managed Microsoft Active Directory	AWS Directory Service
	Simple, secure service to share AWS resources	AWS Resource Access Manager
	Central governance and management across AWS accounts	AWS Organizations
Detection	Unified security and compliance center	AWS Security Hub
	Managed threat detection service	Amazon GuardDuty
	Analyze application security	Amazon Inspector
	Record and evaluate configurations of your AWS resources	AWS Config
	Track user activity and API usage	AWS CloudTrail
	Security management for IoT devices	AWS IoT Device Defender
Infrastructure protection	Network security	AWS Network Firewall
	DDoS protection	AWS Shield
	Filter malicious web traffic	AWS Web Application Firewall (WAF)
	Central management of firewall rules	AWS Firewall Manager
Data protection	Discover and protect your sensitive data at scale	Amazon Macie
	Key storage and management	AWS Key Management Service (KMS)
	Hardware based key storage for regulatory compliance	AWS CloudHSM
	Provision, manage, and deploy public and private SSL/TLS certificates	AWS Certificate Manager
	Rotate, manage and retrieve secrets	AWS Secrets Manager
Incidence response	Investigate potential security issues	Amazon Detective
Incidence response	Fast, automated, cost- effective disaster recovery	CloudEndure Disaster Recovery
Compliance	No cost, self-service portal for on-demand access to AWS’ compliance reports	AWS Artifact
Compliance	Continuously audit your AWS usage to simplify how you assess risk and compliance	AWS Audit Manager