Flashcards
AWS Security Services
Cards in this deck (26)
- 1AWS ArtifactAWS Artifact is a no-cost, self-service portal for access to the AWS security and compliance reports and select online agreements. Reports available include our Service Organization Control (SOC) reports, Payment Card Industry (PCI) reports, and certifications from accreditation bodies across geographies and compliance verticals.
- 2AWS Secrets ManagerAWS Secrets Manager is designed to centrally manage secrets used to access resources on AWS, on-premises, and third-party services. Secrets can be database credentials, passwords, third-party API keys, and even arbitrary text. Secrets Manager enables you to replace hardcoded credentials in your code with an API call to Secrets Manager to retrieve the secret programmatically. Also, you can configure Secrets Manager to automatically rotate the secret for you according to a schedule that you specify.
- 3AWS Single Sign-OnAWS Single Sign-On(SSO) is a cloud SSO service that allows for the central management of SSO access to multiple AWS accounts and business applications. It enables users to sign in to a user portal with their existing corporate credentials and access all of their assigned accounts and applications from one place. AWS SSO includes built-in SAML integrations to many business applications. AWS SSO may be integrated with Microsoft Active Directory
- 4AWS STSThe AWS Security Token Service (STS) is a web service that enables you to request temporary, limited-privilege credentials for IAM users who are taking on a different role or for users who are being federated. A scenario in which someone, or something, needs access to your account to perform a specific task that is not done on a daily basis would be a great candidate for temporary credentials.
- 5AWS Directory ServiceAWS Directory Service for Microsoft Active Directory, also known as AWS Managed Microsoft AD, enables your domain workloads and AWS resources to use managed Active Directory in the AWS Cloud. AWS Managed Microsoft AD is built on actual Microsoft Active Directory and does not require you to synchronize or replicate data from your existing Active Directory to the cloud.
- 6AWS OrganizationsAWS Organizations lets you centrally manage and enforce policies for multiple AWS accounts. This service allows grouping accounts into organizational units and use service control policies to centrally control AWS services across multiple AWS accounts. With Organizations, you can also automate the creation of new accounts through APIs and simplify billing by allowing you to set up a single payment method for all the accounts in your organization through consolidated billing. Organizations is available to all AWS customers at no additional charge.
- 7Amazon CognitoAmazon Cognito lets you add user sign-up, sign-in, and access controls to your web and mobile apps. You can define roles and map users to different roles so your app can access only the resources that are authorized for each user. User sign in can be done either by a third-party identity provider, or directly via Amazon Cognito.
- 8—Logging can be audited on Amazon Simple Storage Service (Amazon S3) buckets using access logs. Access logs contain details about requests, such as the request type, the resources requested, and the date and time the request was made. Server access logs give bucket owners insight into the nature of requests made by clients that are not under their control.
- 9Elastic Load Balancer Access LogLogs for Elastic Load Balancing (ELB) appliances can be audited using its own access logs. ELB access logs capture detailed information about each request sent to your load balancer, including client's IP address, latencies, and server responses. ELB access logs allow you to analyze traffic patterns and troubleshoot issues.
- 10Amazon CloudWatch Logs and EventsAmazon CloudWatch Logs allow you to monitor and troubleshoot all the operating systems and applications that are running in your AWS environment. Enabling CloudWatch Logs also allows you to monitor your logs for specific phrases, patterns, and values. Amazon CloudWatch Events should be monitored to track the overall activity level of your CloudWatch rule collection.
- 11Amazon VPC Flow LogsAmazon VPCs can be audited for connectivity and security issues using VPC Flow Logs. Flow Logs allow you to ensure that network access rules for a VPC are configured properly. Flow Logs capture information about the IP traffic going into or out of your network interfaces and subnets.
- 12AWS Cloud TrailAuditing your CloudTrail logs allows you to obtain a history of API calls to your account made via the console, AWS CLI, AWS SDKs, or other AWS services.
- 13Amazon GuardDutyIs an intelligent threat detection service that provides customers with a way to continuously monitor and protect their AWS accounts and workloads. GuardDuty identifies suspected attackers through integrated threat intelligence feeds and uses machine learning to detect anomalies in account and workload activity. It monitors for activity such as unusual API calls or unauthorized deployments that indicate that a customerâs accounts may have been compromised, as well as direct threats like compromised instances or reconnaissance by attackers.
- 14AWS Trusted AdvisorIs a service that draws upon best practices and inspects your AWS environment making recommendations for saving money, improving system performance, or closing security gaps. You can configure Trusted Advisor notifications to receive weekly emails about any changes. You can also subscribe to Business and Enterprise-level support to access the full suite of Trusted Advisor best-practice checks.
- 15Amazon VPC Flow LogsMany AWS services provide built-in access control audit trails and logs. You can enable Amazon VPC Flow Logs to capture information about the IP traffic going to and from network interfaces in your VPC. VPC flow logs can help you with a number of tasks. For example, you can troubleshoot why specific traffic is not reaching an instance, which in turn helps you diagnose overly restrictive security group rules. You can also use flow logs as a security tool to monitor the traffic that is reaching your instance.
- 16AWS Security HubAWS Security Hub gives you a single pane of glass view of your high-priority security alerts and compliance status across AWS accounts. It provides you a single place that aggregates, organizes, and prioritizes your security alerts, or findings, from multiple AWS services, such as Amazon GuardDuty, Amazon Inspector, and Amazon Macie, as well as from AWS Partner solutions.
- 17AWS ConfigAWS Config is a continuous monitoring and assessment service that can help you detect non-compliance configurations almost in real time. You can view the current and historic configurations of a resource and use this information to troubleshoot outages and conduct security attack analyses.
- 18Amazon InspectorAmazon Inspector is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS. It assesses applications for vulnerabilities or deviations from best practices. After performing an assessment, Amazon Inspector produces a detailed list of security findings prioritized by level of severity.
- 19AWS CloudHSMAWS CloudHSM provides hardware security modules (HSM) in the AWS Cloud. An HSM is a computing device that processes cryptographic operations and provides secure storage for cryptographic keys. CloudHSM allows you to generate, store, import, export, and manage cryptographic keys, including symmetric keys and asymmetric key pairs.
- 20Amazon S3 GlacierAmazon S3 Glacier is a storage service optimized for infrequently used data, also called cold data. This service provides durable and extremely low-cost storage with security features for data archiving and backup. Amazon S3 Glacier stores data as archives within vaults. You can enforce compliance controls for individual Amazon S3 Glacier vaults with a vault lock policy.
- 21AWS Certificate Manager (ACM)AWS Certificate Manager (ACM) handles the complexity of creating and managing public SSL/TLS certificates for your AWS based websites and applications. ACM can also be used to issue private SSL/TLS X.509 certificates that identify users, computers, applications, services, servers, and other devices internally.
- 22Amazon MacieAmazon Macie uses machine learning to automatically discover, classify, and protect sensitive data in AWS. Macie recognizes sensitive data such as personally identifiable information (PII) or intellectual property. It provides you with dashboards and alerts that give visibility into how this data is being accessed or moved.
- 23AWS KMSAWS Key Management Service (AWS KMS) is a managed service that allows you to create and control the keys used in data encryption. If you want a managed service for creating and controlling encryption keys, but do not want or need to operate your own hardware security module (HSM), consider using AWS KMS. You can use the key management and cryptographic features directly in your applications or through AWS services that are integrated with AWS KMS, including AWS CloudTrail, which helps meet your auditing, regulatory, and compliance needs.
- 24AWS Step FunctionsAWS Step Functions lets you coordinate multiple AWS services into serverless workflows so you can build and update apps quickly. Workflows are made up of a series of steps, with the output of one step acting as the input into the next. Step Functions can be used to design and run workflows that stitch together services such as AWS Lambda and AWS CloudFormation to respond to an incident in the cloud.
- 25AWS WAFAWS Web Application Firewall (WAF) helps protect your web applications from common web exploits that could affect application availability, compromise security, or consume excessive resources. AWS WAF gives you control over which traffic to allow or block by defining customizable web security rules.
- 26AWS Well-Architected ToolThe AWS Well-Architected Tool is a self-service tool that is designed to help customers review AWS workloads at any time, without the need for an AWS Solutions Architect. By using this tool, you can review your workloads using a consistent process, understand potential risks in your workload architectures, and identify next steps for improvement.
Information
- Description
- Técnico AWS Certification Flashcards on AWS Security Services, created by Barbara Marinheiro on 26/03/2022.
- Created by
- Barbara Marinheiro
- Views
- 0
- Rating