Overview Security Services Compliance Offerings

Security, Identity, and Compliance on AWS

Secure your workloads and applications in the cloud

Identity and access management

AWS Identity Services enable you to securely manage identities, resources, and permissions at scale. With AWS, you have identity services for your workforce and customer-facing applications to get started quickly and manage access to your workloads and applications.

Learn more »

Detection

AWS identifies threats by continuously monitoring the network activity and account behavior within your cloud environment.

Learn more »

Network and application protection

Network and application protection services enable you to enforce fine-grained security policy at network control points across your organization. AWS services help you inspect and filter traffic to prevent unauthorized resource access at the host-, network-, and application-level boundaries.

Learn more »

Data protection

AWS provides services that help you protect your data, accounts, and workloads from unauthorized access. AWS data protection services provide encryption and key management and threat detection that continuously monitors and protects your accounts and workloads.

Learn more »

Compliance

AWS gives you a comprehensive view of your compliance status and continuously monitors your environment using automated compliance checks based on the AWS best practices and industry standards your organization follows.

Learn more »

AWS Security, Identity, & Compliance services

Category	What is it	AWS service
Identity and access management	Securely manage access to services and resources	AWS Identity and Access Management (IAM)
	Manage workforce access across AWS accounts and apps	AWS IAM Identity Center (successor to SSO)
	Identity management for your apps	Amazon Cognito
	Managed Microsoft Active Directory	AWS Directory Service
	Simple, secure service to share AWS resources	AWS Resource Access Manager
	Central governance and management across AWS accounts	AWS Organizations
Detection	Automate AWS security checks and centralize security alerts	AWS Security Hub
	Protect AWS accounts with intelligent threat detection	Amazon GuardDuty
	Automate vulnerability management	Amazon Inspector
	Record and evaluate configurations of your AWS resources	AWS Config
	Observability of your AWS resources and applications on AWS and on-premises	Amazon CloudWatch
	Track user activity and API usage	AWS CloudTrail
	Security management for IoT devices	AWS IoT Device Defender
Network and application protection	Network security	AWS Network Firewall
	DDoS protection	AWS Shield
	Filter and control outbound DNS traffic for your VPCs	Amazon Route 53 Resolver DNS Firewall
	Filter malicious web traffic	AWS Web Application Firewall (WAF)
	Central management of firewall rules	AWS Firewall Manager
Data protection	Discover and protect your sensitive data at scale	Amazon Macie
	Create and control keys to encrypt or digitally sign your data	AWS Key Management Service (AWS KMS)
	Manage single-tenant hardware security modules (HSMs) on AWS	AWS CloudHSM
	Provision, manage, and deploy public and private SSL/TLS certificates	AWS Certificate Manager
	Create private certificates to identify resources and protect data	AWS Private Certificate Authority
	Centrally manage the lifecycle of secrets	AWS Secrets Manager
Incident response	Investigate potential security issues	Amazon Detective
Incident response	Scalable, cost-effective application recovery to AWS	AWS Elastic Disaster Recovery
Compliance	No cost, self-service portal for on-demand access to AWS’ compliance reports	AWS Artifact
Compliance	Continuously audit your AWS usage to simplify how you assess risk and compliance	AWS Audit Manager