Exam 01 Security Flashcards
What are the AWS Assurance/Compliance 3 Major Categories?
Certifications/Attestations
Laws, Regulations, and Privacy
Alignments/Frameworks
What are the major AWS Compliance Certifications to be aware of?
ISO 27001
PCI DSS Level 1
SOC 1
SOC 2
SOC 3
A _____ _____ is a check to see if your AWS infrastructure meets a given compliance standard. (I;E - even though AWS itself might, your infrastructure or application may not)
Gap Audit
What are the Important Compliance Laws, Regulations and Privacies (AWS adheres to these)?
HIPAA - Standard required to store health information
What are the most importan Compliance Alignments and Frameworks (AWS adheres to these)?
G-Cloud UK - Required for hosting government customers
What does “AWS Manages security of the cloud, security in the cloud is the responsibility of the customer.” mean?
Customers retain control of what security they choose to implement to protect their own content, platform, applications, systems and networks, no differently than they would in an on-site datacenter.
When the Shared Responsibility Topic Comes up, what is the easy way to remember who is responsible for what?
Think about the things you would actually be able to control yourself
What is WAF?
Web Application Firewall
Protects from common web exploits that could
affect availability
compromise security
consume excessive resources
What is the difference between using Elastic Load Balancers with security groups as security vs using a WAF?
ELB/Security Groups secure protocols and ports (Layer 4)
WAF - Can actually read the data being sent (Layer 7)
What is AWS Shield?
Managed DDoS protection
safeguards web apps
always-on detection
enacts inline mitigations
What are the two tiers of AWS Shield?
Standard - free and comes by default
Advanced $3K/month
What is AWS Inspector?
Automated Security Assessment
Audits for vulnerabilities or deviation from best practices
Produces a lined report ordered by criticality
Installed on your EC2 instances
What is AWS Trusted Advisor?
Optimization guidance for your environment for
cost optimization
performance
security
fault tolerance
What are the two levels of AWS Trusted Advisor?
Core Checks and Recommendations (free)
Full Trusted Advisor - Business and Enterprise only
What do roles do?
Allows you to delegate access to users, applications, and services so they can connect to other AWS resources.
E;G Create a role -> add a policy -> apply role to EC2 instance -> anything connected to the instance has access to the services identified in the role policy
