15 items across 3 sections
Identity & Access Management - Users, roles, policies
Key Management Service - Encryption keys & cryptographic operations
Secret storage & rotation
Security Token Service - Temporary credentials & role assumption
User pools & identity federation
Certificate Manager - SSL/TLS certificates
Managed Active Directory - Domain services
SSO federation - Multi-account access
Hardware Security Module - FIPS 140-3 Level 3 key management
Cedar authorization - Policy logic flaws, schema bypass
Comprehensive guide to securing AWS Identity and Access Management. Covers MFA enforcement, least privilege, IAM Identity Center, SCPs, Access Analyzer, and credential management.
Comprehensive guide to securing AWS Key Management Service. Covers key policies, separation of duties, automatic rotation, encryption context, envelope encryption, cross-account access, multi-Region keys, and continuous compliance monitoring.
Comprehensive guide to securing AWS Secrets Manager. Covers automatic rotation, custom Lambda rotation, KMS encryption, resource policies, VPC endpoints, multi-region replication, batch retrieval, and continuous compliance.
Comprehensive guide to securing Amazon Cognito user pools and identity pools. Covers MFA enforcement, advanced threat protection, password policies, WAF integration, JWT verification, Lambda trigger security, and identity pool least privilege.
Our AWS security experts can help you implement best practices across all these topics.
Contact Us