AWS Security — Protecting Your Cloud

Shared Responsibility Model:

AWS is responsible for — "Security OF the cloud": physical infrastructure, hardware, software that runs AWS services

Customer is responsible for — "Security IN the cloud": data, OS patching, network configuration, IAM, application security

Key security services:

AWS Shield — DDoS protection; Standard (free, automatic) and Advanced (paid, 24/7 response team)

AWS WAF — Web Application Firewall; filter malicious web traffic; protect against SQL injection, XSS

Amazon GuardDuty — threat detection service; continuously monitors for malicious activity using ML

AWS Inspector — automated security assessments for EC2 and containers

AWS Macie — uses ML to discover and protect sensitive data in S3 (PII, financial data)

AWS KMS — Key Management Service; create and manage encryption keys; integrated with most AWS services

AWS CloudTrail — logs all API calls in your AWS account; who did what, when, from where; audit trail

AWS Secrets Manager — store, rotate, and retrieve secrets (database passwords, API keys)

Reference:

Wikipedia: AWS

https://en.wikipedia.org/wiki/Amazon_Web_Services