Overview Security Services Compliance Offerings Privacy Learning Security Bulletins Blog Partners Customers

Security, Identity, and Compliance on AWS

Secure your workloads and applications in the cloud

Data protection

Infrastructure protection

AWS provides services that help you protect your data, accounts, and workloads from unauthorized access. AWS data protection services provide encryption and key management and threat detection that continuously monitors and protects your accounts and workloads.

AWS Identity Services enable you to securely manage identities, resources, and permissions at scale. With AWS, you have identity services for your workforce and customer-facing applications to get started quickly and manage access to your workloads and applications.

AWS protects web applications by filtering traffic based on rules that you create. For example, you can filter web requests based on IP addresses, HTTP headers, HTTP body, or URI strings, which allows you to block common attack patterns, such as SQL injection or cross-site scripting.

Threat detection & continuous monitoring

Compliance & data privacy

AWS identifies threats by continuously monitoring the network activity and account behavior within your cloud environment.

AWS gives you a comprehensive view of your compliance status and continuously monitors your environment using automated compliance checks based on the AWS best practices and industry standards your organization follows.

Data protection

Threat detection & continuous monitoring

AWS identifies threats by continuously monitoring the network activity and account behavior within your cloud environment.

Identity & access management

Compliance & data privacy

Infrastructure protection

AWS Security, Identity, & Compliance services

Category

Use cases

AWS service

Identity & access management

Securely manage access to services and resources

AWS Identity & Access Management (IAM)

Cloud single-sign-on (SSO) service

AWS Single Sign-On

Identity management for your apps

Amazon Cognito

Managed Microsoft Active Directory

AWS Directory Service

Simple, secure service to share AWS resources

AWS Resource Access Manager

Detective controls

Unified security and compliance center

AWS Security Hub

Managed threat detection service

Amazon GuardDuty

Analyze application security

Amazon Inspector

Investigate potential security issues

Amazon Detective

Infrastructure protection

DDoS protection

AWS Shield

Filter malicious web traffic

AWS Web Application Firewall (WAF)

Central management of firewall rules

AWS Firewall Manager

Data protection

Discover and protect your sensitive data at scale

Amazon Macie

Key storage and management

AWS Key Management Service (KMS)

Hardware based key storage for regulatory compliance

AWS CloudHSM

Provision, manage, and deploy public and private SSL/TLS certificates

AWS Certificate Manager

Rotate, manage, and retrieve secrets

AWS Secrets Manager

Compliance

No cost, self-service portal for on-demand access to AWS’ compliance reports

AWS Artifact

AWS Security, Identity, & Compliance services

Category	Use cases	AWS service
Identity & access management	Manage user access and encryption keys	AWS Identity & Access Management (IAM)
	Cloud single-sign-on (SSO) service	AWS Single Sign-On
	Managed Microsoft Active Directory	AWS Directory Service
	Identity management for your apps	Amazon Cognito
	Rotate, manage and retrieve secrets	AWS Secrets Manager
	Simple, secure service to share AWS resources	AWS Resource Access Manager
Detective controls	Unified security and compliance center	AWS Security Hub
	Managed threat detection service	Amazon GuardDuty
	Analyze application security	Amazon Inspector
	Discover and protect your sensitive data at scale	Amazon Macie
	Investigate potential security issues	Amazon Detective
Infrastructure protection	DDoS protection	AWS Shield
	Filter malicious web traffic	AWS Web Application Firewall (WAF)
	Central management of firewall rules	AWS Firewall Manager
Data protection	Key storage and management	AWS Key Management Service (KMS)
	Hardware based key storage for regulatory compliance	AWS CloudHSM
	Provision, manage, and deploy public and private SSL/TLS certificates	AWS Certificate Manager