AWS First Steps

Security, Identity, and Compliance

AWS security services from authentication to threat detection, including IAM, KMS, WAF, and GuardDuty

IAM Access Analyzer iconIAM Access Analyzer SpecializedA service that detects externally accessible resources and unused access permissionsAWS Certificate Manager iconAWS Certificate Manager BasicA service that automates provisioning, management, and deployment of SSL/TLS certificatesAWS Artifact iconAWS Artifact SpecializedA service for on-demand access to AWS compliance reports and agreementsAWS Audit Manager iconAWS Audit Manager SpecializedA service that automates evidence collection and assessment for compliance auditsAWS CloudHSM iconAWS CloudHSM SpecializedA service for managing encryption keys using dedicated hardware security modulesAmazon Cognito iconAmazon Cognito PopularA service that provides authentication, authorization, and user management for web and mobile applicationsAmazon Detective iconAmazon Detective SpecializedA service that automatically analyzes security findings and investigates root causesAWS Directory Service iconAWS Directory Service SpecializedA service that provides managed Active Directory on AWSAWS Firewall Manager iconAWS Firewall Manager SpecializedA service for centrally managing firewall rules across your entire AWS OrganizationAmazon GuardDuty iconAmazon GuardDuty PopularA machine learning-powered threat detection serviceAWS IAM iconAWS IAM EssentialAn authentication and authorization service for securely managing access to AWS resourcesAWS IAM Identity Center iconAWS IAM Identity Center PopularA service that provides single sign-on to multiple AWS accounts and SaaS applicationsAmazon Inspector iconAmazon Inspector PopularA service that automatically scans EC2 instances, container images, and Lambda functions for vulnerabilitiesAWS KMS iconAWS KMS EssentialA managed encryption key service for securely creating and managing keys used to encrypt dataAmazon Macie iconAmazon Macie SpecializedA service that uses machine learning to automatically discover and protect sensitive data in S3 bucketsAWS Network Firewall iconAWS Network Firewall SpecializedA managed firewall service for fine-grained control of VPC network trafficAWS Payment Cryptography iconAWS Payment Cryptography SpecializedA managed service providing cryptographic key management and operations for payment processingAWS Private Certificate Authority iconAWS Private Certificate Authority SpecializedA managed certificate authority service for issuing and managing private certificatesAWS Resource Access Manager iconAWS Resource Access Manager SpecializedSecurely share AWS resources with other accounts within your organizationAWS Secrets Manager iconAWS Secrets Manager EssentialSecurely manage and automatically rotate database passwords and API keysAWS Security Hub iconAWS Security Hub PopularCentrally manage your AWS security posture and automatically check compliance with best practicesAmazon Security Lake iconAmazon Security Lake NewA data lake service that centralizes security data in OCSF formatAWS Shield iconAWS Shield SpecializedA managed service that protects applications from DDoS attacksAWS Signer iconAWS Signer SpecializedA service that signs and verifies code to ensure only trusted code is deployedAmazon Verified Permissions iconAmazon Verified Permissions NewA service that externalizes application authorization logic using the Cedar policy languageAWS WAF iconAWS WAF PopularA firewall service that protects web applications from malicious traffic