October: Cyber Security Awareness Month
October is being celebrated as #CyberSecurityAwareness Month.
As being practitioner in the domain of #CyberSecurity and specially focused on #enterprisesecurity, #DevSecOps and #cloudSecurity, I learnt that many of us don't have clear understanding and knowledge about different security services available on cloud and its correct use-case.
This post is an attempt to briefly highlight different security services available on #AWS.
1. AWS IAM Access Analyzer:
common use-case
?Identify resources?in your organization and accounts that are shared with an external entity.
identify unused access?in your organization and accounts.
?validates IAM policies?against policy grammar and AWS best practices.
?validate IAM policies against your specified security standards.
?generates IAM policies?based on access activity in your AWS CloudTrail logs.
2. AWS Config:
AWS Config allows us to?evaluate, review, and assess the configuration of AWS resources.
Few common use-case for AWS config is:
Resource Configuration
Audit & Compliance
Security Analysis
Configuration changes
Here is typical AWS security services deployment architecture:
Stay tuned for next post where more we can see details on Amazon Macie, GuardDuty and Inspecter with its use-case.