AWS Security Documentation

Shared Responsibility Model

Security is a shared responsibility between AWS and you. The shared responsibility model describes this as security of the cloud and security in the cloud.

AWS Architecture Center Security Best Practices

Learn how to meet your security and compliance goals using AWS infrastructure and services.

Security Learning

Security resources include security-related information in blog posts, whitepapers, tutorials, training, and more.

Solutions for Security, Identity, and Compliance

These solution implementation guides discuss architectural considerations and provide steps for deploying security and compliance features.

HIPAA Eligible Services

Lists HIPAA eligible services. Not all AWS services are HIPAA eligible.

Compliance Resources

Workbooks and guides specific to industries and locations.

Security Compliance Management - AWS Artifact

Understand the shared responsibility model through the lens of compliance. Save time with on-demand access to AWS compliance reports and manage compliance agreements at scale.

Evaluating Resources with AWS Config Rules

The AWS Config service assesses how well your resource configurations comply with internal practices, industry guidelines, and regulations.

Compute

• Amazon EC2
• AmazonEC2 Auto Scaling
• AmazonEC2 Image Builder
• AWS App Runner
• AWS Batch
• AWS Elastic Beanstalk
• AWS Lambda
• Amazon Lightsail
• AWS Outposts
• AWS ParallelCluster
• AWS Serverless Application Repository
• AWS Wavelength

Containers

• AmazonECR
• AmazonECS
• AmazonEKS
• AWSApp2Container
• AWSApp Runner

Storage

• AmazonS3
• AWSBackup
• AmazonEBS direct APIs
• AmazonEFS
• AWSElastic Disaster Recovery
• AmazonFSx for Lustre
• AmazonFSx for NetApp ONTAP
• AmazonFSx for OpenZFS
• AmazonFSx for Windows File Server
• AmazonGlacier
• AWSStorage Gateway

Databases

• AmazonAurora
• AmazonDocumentDB
• AmazonDynamoDB
• AmazonElastiCache for Memcached
• AmazonElastiCache for Redis
• AmazonKeyspaces (for Apache Cassandra)
• AmazonMemoryDB for Redis
• AmazonNeptune
• AmazonRDS
• AmazonRedshift
• AmazonTimestream

Security, Identity, & Compliance

• AWSIdentity and Access Management (IAM)
• AWSAudit Manager
• AmazonCognito
• AmazonDetective
• AWSDirectory Service
• AWSFirewall Manager
• AmazonCloud Directory
• AmazonGuardDuty
• AWSIAM Identity Center (successor to AWS Single Sign-On)
• AmazonInspector
• AmazonMacie
• AWSNetwork Firewall
• AWSPayment Cryptography
• AWSResource Access Manager (AWS RAM)
• AWSSecrets Manager
• AWSSecurity Hub
• AmazonSecurity Lake
• AWSShield
• AmazonVerified Permissions
• AWSWAF

Cryptography & PKI

• AWSCloudHSM
• AWSKey Management Service (AWS KMS)
• AWSCertificate Manager
• AWSPrivate Certificate Authority
• AWSSigner

Machine Learning

• AmazonBedrock
• AmazonCodeGuru Profiler
• AmazonCodeGuru Reviewer
• AmazonComprehend
• AmazonComprehend Medical
• AWSDeep Learning-AMI
• AWSDeep Learning Containers
• AmazonDevOps Guru
• AmazonForecast
• AmazonFraud Detector
• AWSHealthImaging
• AWSHealthLake
• AWSHealthOmics
• AmazonKendra
• AmazonLex
• AWSMCP Server
• AmazonMonitron
• AWSPanorama
• AmazonPersonalize
• AmazonPolly
• AmazonRekognition
• AmazonSageMaker
• AmazonTextract
• AmazonTranscribe
• AmazonTranslate

Management & Governance

• AWSAccount Management
• Auto Scaling
• AWSChatbot
• AWSCloudFormation
• AWSCloudTrail
• AmazonCloudWatch
• AWSCommand Line Interface (AWS CLI)
• AWSConfig
• AWSConsole Mobile Application
• AWSControl Tower
• AWSHealth
• AWSLaunch Wizard
• AWSLicense Manager
• AmazonManaged Grafana
• AmazonManaged Service for Prometheus
• AWSOrganizations
• AWSProton
• AWSResilience Hub
• AWS Resource Explorer
• AWSResource Groups
• AWSService Catalog
• Service Quotas
• AWSSystems Manager
• Tag Editor
• AWSTelco Network Builder
• AWSTools for PowerShell
• AWSTrusted Advisor
• AWSUser Notifications
• AWSWell-Architected Tool

Serverless

• AWSLambda
• AmazonAPI Gateway
• AmazonDynamoDB
• AmazonEventBridge
• AmazonSNS
• AmazonSQS
• AmazonS3
• AWSAppSync
• AWSFargate
• AWSStep Functions

Developer Tools

• AWS Infrastructure Composer
• AWS Cloud Control API
• AWSCloud9
• AWSCodeArtifact
• AWSCodeBuild
• AWSCodeCommit
• AWSCodeDeploy
• AWSCodePipeline
• AmazonCodeWhisperer
• AWSX-Ray

Migration & Transfer

• AWSApplication Discovery Service
• AWSApplication Migration Service
• AWSDatabase Migration Service
• AWSDataSync
• AWSMainframe Modernization
• AWSMigration Hub
• AWSTransfer Family

Networking & Content Delivery

• AmazonAPI Gateway
• AWSApp Mesh
• AWSCloud Map
• AmazonCloudFront
• AWSDirect Connect
• Elastic Load Balancing
• AWSGlobal Accelerator
• AmazonRoute 53
• Amazon Route 53 Application Recovery Controller
• AWSVerified Access
• AmazonVPC
• AmazonVPC Lattice
• AWSVPN

Media Services

• AWS Deadline Cloud
• AWSElemental MediaConnect
• AWSElemental MediaConvert
• AWSElemental MediaLive
• AWSElemental MediaPackage
• AWSElemental MediaTailor
• AmazonInteractive Video Service

Internet of Things (IoT)

• AWSIoT Core
• FreeRTOS
• AWSIoT FleetWise
• AWSIoT Greengrass
• AWSIoT SiteWise
• AWSIoT TwinMaker

Front-End Web & Mobile

• AWSAmplify
• AWSAppSync
• AWSDevice Farm
• AmazonLocation Service
• AmazonPinpoint
• AmazonSNS

End User Computing

• AmazonWorkSpaces
• AmazonWorkSpaces Web
• AmazonAppStream 2.0

Analytics

• AmazonAppFlow
• AmazonAthena
• AWSClean Rooms
• AmazonCloudSearch
• AWSData Exchange
• AWSData Pipeline
• AmazonDataZone
• AWSEntity Resolution
• AmazonEMR
• AmazonFinSpace
• AWSGlue
• AmazonKinesis Data Firehose
• AmazonKinesis Data Streams
• AmazonKinesis Video Streams
• AWSLake Formation
• Amazon Managed Service for Apache Flink
• AmazonMSK
• AmazonOpenSearch Service
• AmazonQuickSight
• AmazonRedshift

Application Integration

• AmazonEventBridge
• AmazonMWAA
• AmazonMQ
• AmazonSNS
• AmazonSQS
• AWSStep Functions
• AmazonSWF

Business Applications

• AWSAppFabric
• AmazonChime
• AmazonConnect
• AWSEnd User Messaging Push
• AmazonPinpoint
• AmazonSimple Email Service (Amazon SES)
• AWS Wickr
• AmazonWorkMail

Customer Enablement Services

• AWSAccelerate
• AWSIncident Detection and Response
• AWSManaged Services

Satellite

• AWSGround Station

Quantum Computing

• AmazonBraket

Blockchain

• AmazonManaged Blockchain

Game Development

• AmazonGameLift

Cloud Financial Management

• AWSBilling & Cost Management
• AWSPricing Calculator
• Savings Plans

SDKs & Toolkits

• AWSCloud Development Kit (AWS CDK)
• AWSCommand Line Interface (AWS CLI)
• AWSSDK for C++
• AWSSDK for Go
• AWSSDK for Java v.1
• AWSSDK for Java v.2
• AWSSDK for JavaScript
• AWSSDK for Kotlin
• AWSSDK for .NET
• AWSSDK for PHP
• AWSSDK for Python (Boto 3)
• AWSSDK for Ruby
• AWSSDK for Rust
• AWSSDK for Swift
• AWSToolkit for JetBrains
• AWSToolkit for Visual Studio
• AWSToolkit for Visual Studio Code
• AWSTools for PowerShell
• AWSToolkit for Azure DevOps

Additional Resources

• AWSMarketplace