2.4
Security services table
Map IAM, KMS, CloudTrail, GuardDuty, WAF, Shield, Artifact, and Macie to their primary purposes.
Key points
- KMS — encryption keys.
- GuardDuty — threat detection.
- WAF — web app protection; Shield — DDoS.
- Artifact — compliance documents; Macie — sensitive data in S3.
Important AWS security services
| Service | Main purpose |
|---|---|
| IAM | Identity and permissions |
| KMS | Encryption key management |
| CloudTrail | API activity and auditing |
| GuardDuty | Threat detection |
| WAF | Web application protection |
| Shield | DDoS protection |
| Artifact | Compliance reports and documents |
| Macie | Sensitive data discovery and protection in S3 |
Exam focus
Pick the service that matches the security capability named in the stem.