Security Features

Question 1

Shared Responsibility Model

Answer 1

AWS is responsible for physical, network & hypervisor security. User is responsible for user data & application security. Security of the guest OS can belong to user (on EC2) or AWS (on other services).

Question 2

IAM

Answer 2

A user is a person/service. A person is a member of a group. A person or group can be assigned a role, which describes the authentication credentials. A policy document exists which specifies which users, groups, or roles have which permissions.

Question 3

Amazon Inspector

Answer 3

Assesses apps for common security vulnerabilities on an automatic basis; available in CLI, SDK, API & console.

Question 4

AWS Shield

Answer 4

DDOS protection & mitigation. Free & paid tiers of service.

Question 5

AWS Trusted Advisor

Answer 5

Checks 4 areas: Cost optimization, performance, security & fault-tolerance + provides recommendations to fix.

Question 6

Support / Customer Service

Answer 6

Each project has a technical accounts manager & a “support concierge” for dedicated assistance for that one group. There are 4 levels of support - Basic, Developer, Business + Enterprise