Security components and resources

Beyond detection services, AWS provides edge protections, central firewall management, a marketplace for third-party security tools, and documentation sources.

Security features and services

• AWS WAF: Web application firewall: filters HTTP(S) requests to CloudFront, Application Load Balancer, API Gateway, and others using rules (for example, block SQL injection or specific IPs).
• AWS Firewall Manager: Centrally configures and enforces WAF rules, Shield Advanced protections, and security group policies across accounts in AWS Organizations.
• AWS Shield: DDoS protection (Standard free and automatic; Advanced paid).
• Amazon GuardDuty: Continuous threat detection across accounts.
• Network controls: Security groups and network ACLs protect resources inside a VPC (see Domain 3).

Third-party security products

• AWS Marketplace offers third-party security software (firewalls, endpoint protection, SIEM, and more) that you can buy and deploy, billed through your AWS bill.

Where to find security information

• AWS Security Center: AWS's security hub page with security and compliance resources.
• AWS Security Blog: Articles on new security features and best practices.
• AWS Knowledge Center: Answers to the most common questions and requests AWS Support receives.
• AWS documentation: Each service guide has a Security chapter describing its part of the shared responsibility model.

Finding security issues

• AWS Trusted Advisor: Checks your account against best practices, including security checks such as open security group ports, MFA on the root user, and public S3 buckets.
• Security Hub, GuardDuty, and Inspector findings round out the picture.