5 Security and compliance

In chapter 4, we learned about the many different types of AWS Cloud services. They are compute services, storage services, database services, network and content delivery services, and management tools. Missing from the discussion was security services.

While many security concepts and services may take a back seat when compared with their more flashy counterparts like compute and storage services, security and compliance in the cloud are vital for architecting and maintaining effective and secure IT infrastructures.

Security and Compliance is also the second domain of the AWS Certified Cloud Practitioner exam. For those of you expecting to take the exam, chapter 7 covers the certification exam and the content you need to know in more detail. In the current chapter, we learn about vital security and compliance concepts and then move on to the core security services that you should know about when dipping your toes into the AWS Cloud.

5.1 Security and compliance concepts

5.1.1 Shared responsibility model

5.1.2 A Well-Architected Framework

5.1.3 Principle of least privilege

5.1.4 Section quiz

5.2 Security services

5.2.1 AWS Identity and Access Management

5.2.2 AWS Web Application Firewall

5.2.3 AWS Shield

5.2.4 Amazon Inspector

5.2.5 AWS Trusted Advisor

5.2.6 Amazon GuardDuty

5.2.7 Section quiz

Summary