--- title: "AWS Native Security Services Cheat Sheet | Cybr" url: https://cybr.com/cheat-sheets/aws-security-services/ --- # AWS Native Security Services This represents a list of AWS’ native security services, broken down by category and explained in high-level detail. [Cybr](https://cybr.com/) ### Identity and Access Management IAM Manage identities and access to AWS services and resources. This service lets you create IAM Users, Groups, Roles, Policies, and more **IAM Access Analyzer** IAM feature for least privilege: external, internal & unused access findings, policy validation & checks, and policy generation IAM Identity Center (SSO) Manage access to multiple AWS accounts and applications, and connect to your corporate directory or the Directory Service Cognito Add user sign-up and sign-in to your web or mobile applications Verified Permissions Policy-based access control by using roles and attributes with Cedar Directory Service Managed Microsoft AD, or AD Connector to an existing on-prem AD, to give AD users & groups access to AWS (can connect to Identity Center) RAM (Resource Access Manager) Securely share resources across multiple accounts, like VPC subnets, private certificate authorities, etc... Organizations Centrally manage multi-account AWS environments and enable services like Identity Center, Control Tower, and more ### Detection and Response GuardDuty Continuous threat detection for accounts & workloads, with protection plans for S3, EKS, runtime, RDS, Lambda & malware. Extended Threat Detection correlates multi-stage attacks Inspector Automated vulnerability management for EC2, container images, Lambda & source code. Scans for software vulnerabilities, code issues & unintended network exposure Security Hub Correlates findings from GuardDuty, Inspector, Macie, Security Hub CSPM & more into prioritized security risks across your accounts Security Hub CSPM Automated posture checks against standards like CIS & AWS Foundational Security Best Practices (the original Security Hub) Security Incident Response Triage of GuardDuty & Security Hub findings, guided containment, and 24/7 access to the AWS Customer Incident Response Team Security Lake Central location to store all of your security data. Then analyze and visualize this data through Athena/OpenSearch/SageMaker, etc... Detective Conduct security investigations by analyzing & visualizing security data related to security issues. Integrates with many services on this list CloudWatch Monitor your account, applications, and resources on AWS, on-prem, or on other clouds. Collects all sorts of data (not just security related) CloudTrail Track API usage and user activity across all of your AWS accounts and regions. Enables incident response & audits, and detects unusual activity IoT Device Defender Security for IoT devices & fleets. Audits device configurations against best practices (Detect is closed to new customers) Elastic Disaster Recovery Disaster recovery service that lets you test, recover, and fail back cloud-based & on-prem apps ### Network and application protection Firewall Manager Centrally manage AWS WAF, Shield Advanced, security groups & network ACLs, Network Firewall, Route 53 Resolver DNS Firewall & 3rd party firewalls Network Firewall Deploy across your VPCs to control traffic flowing in and out Shield DDoS protection for your apps & AWS resources. Standard is free & covers L3/L4. Advanced adds L7 protection with WAF, the Shield Response Team & cost protection Verified Access Validates corporate application requests before granting access and removes the need for a VPN Web Application Firewall (WAF) Protect web apps from common exploits (like SQLi, XSS, etc...) & bots. Works with CloudFront, ALB, API Gateway, AppSync, Cognito, App Runner, Verified Access & Amplify Route 53 Resolver DNS Firewall Firewall for outbound DNS traffic for your VPCs. You can create deny lists and allow lists for domains & protect against common DNS threats ### Data Protection Macie Uses ML and pattern matching to help protect sensitive data at scale. Example: it can detect PII stored in Amazon S3 and trigger automated remediation with EventBridge & Security Hub workflows Key Management Service (KMS) Create, manage, and control cryptographic keys for your applications and services. Used to encrypt or digitally sign data CloudHSM Single-tenant hardware security modules (HSMs) so you can generate and use your own encryption keys in instances only used by you & not other customers Certificate Manager SSL/TLS certificates you can create, deploy, & manage for use with AWS services and resources Payment Cryptography For organizations that process payments and need to secure the data with cryptographic functions and key management Private Certificate Authority Issue and manage private certificates. Great for IAM Roles Anywhere, as an example Backup Centralized, policy-based backups across AWS services, with Vault Lock & logically air-gapped vaults for ransomware recovery Secrets Manager Central management for secrets (passwords, private API keys, tokens, etc..). Works directly with KMS to encrypt secrets. Say bye to hardcoded secrets ### Compliance Artifact On-demand access to AWS security and compliance reports and select online agreements. Audit Manager Continuously audit your AWS environments against compliance frameworks (closed to new customers; AWS points to Config conformance packs) ### Honorable mentions Control Tower Set up, operate, and enforce multi-account environments security best practices & controls AWS Systems Manager Manage your cloud resources for operations, app, change, and node management. Works great with Config, for example AWS Config Keeps an eye on configurations of your services & workloads, and enables automated remediation when deviations happen to remain compliant ## Use this cheat sheet with AI Copy a ready-to-use prompt into your preferred AI assistant. Goal Preview prompt Prompt **Cybr** © 2026 - Cybr, Inc Sources and more info: [\- More info from AWS: https://aws.amazon.com/products/security/](https://aws.amazon.com/products/security/) **More cheat sheets like this:** [https://cybr.com/cheat-sheets](https://cybr.com/cheat-sheets)