Cheat sheets
Our catalog of cloud security cheat sheets
Showing 1–7 of 7 cheat sheets
-
- Encryption & key management
- Identity & access
AWS Secrets Manager Best Practices
Ten best practices for storing, encrypting, caching, rotating, and monitoring secrets, with least-privilege access and private networking.
- Secrets Manager
- AWS KMS
- Secret rotation
- VPC endpoints
-
- Identity & access
Anatomy of IAM Policies in AWS
Understand IAM policy elements, annotated JSON examples, and cross-account access with role trust and permissions policies.
- IAM policies
- Policy elements
- Cross-account access
- Trust policies
- AWS STS
-
- Identity & access
AWS IAM Identity Center
Manage workforce access with single sign-on, permission sets, and temporary credentials.
- Single sign-on
- Permission sets
- Federation
- Temporary credentials
- AWS CLI
-
- Storage security
- Identity & access
Amazon S3 Security Controls
Current controls for protecting, restricting, encrypting, and monitoring data stored in Amazon S3.
- Access control
- Object protection
- Encryption
- Logging and monitoring
-
- Storage security
- Identity & access
S3 Access Control
Compare S3 bucket policies, S3 ACLs, and IAM policies, including their scope, syntax, permissions, and integration with IAM.
- S3 bucket policies
- S3 ACLs
- IAM policies
- Access control
-
- Storage security
- Identity & access
Create a least privilege S3 bucket policy
Learning how to keep your Amazon S3 buckets safe and finding weak spots in bucket policies is an important part of managing AWS resources.
- S3 bucket policies
- Least privilege
- IAM
- Resource policies
-
- Incident response
- Identity & access
Incident Response Playbook — IAM credential exposure
What do you do if you find out your AWS IAM access keys have been exposed and exploited by a threat actor? Here's your cheat sheet playbook
- Analysis
- Containment
- Eradication
- Recovery
- Post-Incident Activity
