1 - AWS Security Services

Question 1

This service enables you to securely control access to AWS services and resources for your users. Using it, you can create and manage AWS users and groups, and use permissions to allow and deny their access to AWS resources.

Answer 1

Identity and Access Management (IAM)

Question 2

These are associated with EC2 instances and provide security at the protocol and port access level. Each one contains a set of rules that filter traffic coming into and out of an EC2 instance. If there is no rule that explicitly permits a particular data packet, it will be dropped. They also can be applied to many other services within your VPC, including ELB, RDS, Redshift, ElastiCache, and others.

Answer 2

Security groups

Question 3

These are used to control traffic moving between your AWS VPC subnets. They function like traditional access control lists and are made up of permit and deny entries for various addresses and ports.

Answer 3

Network ACLs