Security, identity & compliance
Topics
Automatically audit AWS security groups that allow access from public IP addresses
Automatically remediate unencrypted Amazon RDS DB instances and clusters
Bidirectionally integrate AWS Security Hub CSPM with Jira software
Build a pipeline for hardened container images using EC2 Image Builder and Terraform
Centralize IAM access key management in AWS Organizations by using Terraform
Check an Amazon CloudFront distribution for access logging, HTTPS, and TLS version
Choose an Amazon Cognito authentication flow for enterprise applications
Create AWS Config custom rules by using AWS CloudFormation Guard policies
Create a consolidated report of Prowler security findings from multiple AWS accounts
Deploy and manage AWS Control Tower controls by using AWS CDK and CloudFormation
Deploy and manage AWS Control Tower controls by using Terraform
Deploy the Security Automations for AWS WAF solution by using Terraform
Deploy a pipeline that simultaneously detects security issues in multiple code deliverables
Deploy detective attribute-based access controls for public subnets by using AWS Config
Deploy preventative attribute-based access controls for public subnets
Detect Amazon RDS and Aurora database instances that have expiring CA certificates
Dynamically generate an IAM policy with IAM Access Analyzer by using Step Functions
Enable Amazon GuardDuty conditionally by using AWS CloudFormation templates
Enable transparent data encryption in Amazon RDS for SQL Server
Identify public Amazon S3 buckets in AWS Organizations by using Security Hub CSPM
Manage AWS Organizations policies as code by using AWS CodePipeline and Amazon Bedrock
Manage AWS IAM Identity Center permission sets as code by using AWS CodePipeline
Prevent internet access at the account level by using a service control policy
Export a report of AWS IAM Identity Center identities and their assignments by using PowerShell
Restrict access based on IP address or geolocation by using AWS WAF
Scan Git repositories for sensitive information and security issues by using git-secrets
Secure file transfers by using Transfer Family, Amazon Cognito, and GuardDuty
Secure sensitive data in CloudWatch Logs by using Amazon Macie
Send custom attributes to Amazon Cognito and inject them into tokens
Simplify private certificate management by using AWS Private CA and AWS RAM
Streamline Amazon EC2 compliance management with Amazon Bedrock agents and AWS Config
Update AWS CLI credentials from AWS IAM Identity Center by using PowerShell
Use Terraform to automatically enable Amazon GuardDuty for an organization
Verify operational best practices for PCI DSS 4.0 by using AWS Config
