---
type: archive
area: archive
status: archived
date: 2026-05-03
created: 2026-05-03
updated: 1980-01-01
tags:
  - archive
---
#### Protect against **DDoS** Attack
- AWS Shield Standard
Protect against DDoS  attack for you application
- AWS shield Advanced
Protect against DDoS attacks and more sophisticated attacks
Premium 24/7
- AWS WAF
![[img-20240915-220953-83f6f9b1.png]]
Filter specific request based on rules
- CloudFront and Route 53
![[img-20240915-220633-aa52b4bb.png]]
![[img-20240915-221406-d9908a79.png]]
#### AWS Kms
managed by AWS
KMS is the core of encryption in AWS

#### CloudHSM
aws give the hardware  (HSM device) and all other things keys and encryption managed by the user

![[img-20240915-221947-00d770a3.png]]

#### AWS certificate Manager
let's you easily provision, manage and deploy SSL/TLS certificate
connected to application load balancer
Automatic TLS certificate renewal

#### AWS secret manager
![[img-20240915-222921-55def80e.png]] 
#### AWS Artifacts
 ![[img-20240915-223323-08fe2de3.png]]

#### Amazon Guard Duty
![[img-20240915-223528-fd376e37.png]]![[img-20240915-223546-44489818.png]]
#### Amazon Inspector
Analyses EC2 instances, ECR for vulnerabilities based ssm agent for EC2
![[img-20240915-223951-349aa8fc.png]]
Runs every time the database of CVE is updated
#### AWS Config
![[img-20240915-224353-f7442475.png]]
#### AWS Macie
![[img-20240915-225343-54cd674a.png]]
uses to find sensitive data in s3

#### AWS Security Hub
![[img-20240915-225444-d70c0c6f.png]]

![[img-20240915-225529-9bc02731.png]]
#### Amazon Detective
![[img-20240915-225740-7e44d325.png]]
#### Root User
Type of actions that are done by root user
![[img-20240916-011153-a160114e.png]]

![[img-20240916-011323-c5acbeb5.png]]
![[img-20240916-011434-0f0137e2.png]]