Security, Identity, and Compliance on AWS

Secure your workloads and applications in the cloud
Identity and access management
AWS Identity Services enable you to securely manage identities, resources, and permissions at scale. With AWS, you have identity services for your workforce and customer-facing applications to get started quickly and manage access to your workloads and applications.
Learn more »
Detection
AWS identifies threats by continuously monitoring the network activity and account behavior within your cloud environment.
Learn more »
Network and application protection
Network and application protection services enable you to enforce fine-grained security policy at network control points across your organization. AWS services help you inspect and filter traffic to prevent unauthorized resource access at the host-, network-, and application-level boundaries.
Learn more »
Data protection
AWS provides services that help you protect your data, accounts, and workloads from unauthorized access. AWS data protection services provide encryption and key management and threat detection that continuously monitors and protects your accounts and workloads.
Learn more »
Compliance
AWS gives you a comprehensive view of your compliance status and continuously monitors your environment using automated compliance checks based on the AWS best practices and industry standards your organization follows.
Learn more »

AWS Security, Identity, & Compliance services

Category What is it AWS service
Identity and access management Securely manage access to services and resources   AWS Identity and Access Management (IAM)
Manage workforce access across AWS accounts and apps AWS IAM Identity Center (successor to SSO)
Identity management for your apps Amazon Cognito
Managed Microsoft Active Directory AWS Directory Service
Simple, secure service to share AWS resources AWS Resource Access Manager
Central governance and management across AWS accounts AWS Organizations
Detection
Automate AWS security checks and centralize security alerts AWS Security Hub
Protect AWS accounts with intelligent threat detection Amazon GuardDuty
Automate vulnerability management Amazon Inspector
Record and evaluate configurations of your AWS resources AWS Config
Observability of your AWS resources and applications on AWS and on-premises Amazon CloudWatch
Track user activity and API usage AWS CloudTrail
Security management for IoT devices AWS IoT Device Defender
Network and application protection Network security AWS Network Firewall
DDoS protection AWS Shield
Filter and control outbound DNS traffic for your VPCs Amazon Route 53 Resolver DNS Firewall
Filter malicious web traffic AWS Web Application Firewall (WAF)
Central management of firewall rules AWS Firewall Manager
Data protection Discover and protect your sensitive data at scale Amazon Macie
Create and control keys to encrypt or digitally sign your data AWS Key Management Service (AWS KMS)
Manage single-tenant hardware security modules (HSMs) on AWS AWS CloudHSM
Provision, manage, and deploy public and private SSL/TLS certificates AWS Certificate Manager
Create private certificates to identify resources and protect data AWS Private Certificate Authority 
Centrally manage the lifecycle of secrets AWS Secrets Manager
Incident response Investigate potential security issues Amazon Detective
Scalable, cost-effective application recovery to AWS AWS Elastic Disaster Recovery
Compliance No cost, self-service portal for on-demand access to AWS’ compliance reports AWS Artifact
Continuously audit your AWS usage to simplify how you assess risk and compliance AWS Audit Manager
Securing workloads on AWS
To make it easier for you to secure your workloads on AWS, we also provide the world’s most secure cloud platform.

What's new in Security, Identity, & Compliance?

View all >>

Customers

Snap logo

"We love it when we are able to simply provide extra security without any inconvenience."

- Roger Zou on Amazon GuardDuty
Snap Inc.

Thermo Fisher Scientific logo
Gett
robinhood logo
Delaware North logo
City of Chicago seal
Here logo
British Gas logo
Canary logo
University of Maryland logo
Expedia Group logo
Crop Trust logo
Soundcloud logo
Contact an AWS Business Representative
Have Questions? Connect with an AWS Business Representative
Exploring security roles?
Apply today »
Want AWS Security updates?
Follow us on Twitter »