Security Flashcards
Security
What service provides visibility into user & resource activity and helps you enable operational and risk auditing, governance, and compliance of your AWS account
CloudTrail
Security
What 4 pieces of informaiton does CloudTrail record
User
Account
Source IP
Timestamp
Security
What 2 use cases is CloudTrain good for
After-the-fact incident investigation
near real time intrusion detection
Security
What service acts as “CCTV for your AWS account”
CloudTrail
Security
What service provides free DDOS protection against layer 3 & 4 attacks
Shield
Security
What service provides protection against http/https (layer 7) attacks
AWS WAF
Security
AWS WAF has 3 opperating modes
what are they?
(1) Allow all but …
(2) Deny all but …
(3) Count all that match …
Security
What service provides threat detection using AI to determine a baseline for your account
Guard Duty
Security
AWS Guard Duty monitors 3 things
What are they?
CloudTrail Logs
VPC Flow Logs
DNS Logs
Security
Service that provides a single-pane-of-glass for all firewall rules accross accounts
Firewall Manager
Security
Service that searches for PII within your S3 buckets
Macie
Security
Automated security assesment service providing continuous scanning of either network’s (VPC’s) or hosts (EC2’s)
Amazon Inspector
Security
When would you choose to use Parameter Store over secrets manager
Its free
Dont need key rotation
Security
When would you choose to use Secrets Manager over Parameter Store
You need key rotation
You need PW Generation from cloudformation
You have more than 10k secrets
Security
How can you allow access to single files within a S3 bucket securely
Use a presigned URL
