Security

Identity and Access Management (IAM), KMS, Secrets Manager, Cognito, WAF, Shield, and governance services. Learn how AWS protects data, enforces least privilege, and meets compliance.

AWS WAF: Rules, Managed Rule Groups & Pricing Explained

AWS WAF is a Layer 7 web application firewall for CloudFront, ALB, API Gateway, and AppSync. Learn rule groups, rate-based rules, CAPTCHA, logs, and pricing.

AWS Shield: Standard vs Advanced DDoS Protection Compared

AWS Shield protects AWS workloads from DDoS attacks. Standard is free always-on; Advanced is $3,000/month with SRT support, cost protection, and bundled WAF.

AWS Secrets Manager: Rotation, Pricing & RDS Integration

AWS Secrets Manager stores and rotates passwords, API keys, and DB credentials. Learn Lambda rotation, RDS integration, versioning, cross-account sharing, pricing.

AWS KMS: Key Types, Envelope Encryption & Pricing Guide

AWS KMS is a managed service for cryptographic keys. Learn customer-managed vs AWS-managed vs AWS-owned keys, key policies, envelope encryption, and pricing.

AWS IAM: Users, Roles, Policies & How It Works

AWS IAM controls who can access what in AWS. Learn users, groups, roles, identity vs resource-based policies, evaluation logic, MFA, and least-privilege best practices.

AWS IAM Role: Temporary Credentials, Trust Policies, Uses

An IAM role is an AWS identity with temporary STS credentials assumed by services, users, or federated principals. Learn trust vs permissions policies and uses.

IAM Role vs IAM User: Key Differences & Best Practices

IAM role vs IAM user compared: long-lived access keys vs temporary STS credentials, federation, instance profiles, and current AWS best practices for security.

AWS IAM Policy: JSON Structure, Types, Limits Explained

An AWS IAM policy is a JSON document with Effect, Action, Resource, and Condition fields. Learn managed vs inline, identity vs resource-based, and size limits.

Amazon GuardDuty: Threat Detection, Data Sources, Pricing

Amazon GuardDuty is managed threat detection using CloudTrail, VPC Flow Logs, DNS logs, and ML. Learn findings, EKS/S3/Lambda/Malware Protection, and pricing.

Amazon Cognito: User Pools, Identity Pools & Pricing

Amazon Cognito provides user sign-up/sign-in via User Pools and temporary AWS credentials via Identity Pools. Learn SAML/OIDC federation, MFA, JWTs, MAU pricing.