View a markdown version of this page

Security in your use of the AWS Shield network security director - AWS WAF, AWS Firewall Manager, AWS Shield Advanced, and AWS Shield network security director

Introducing a new console experience for AWS WAF

You can now use the updated experience to access AWS WAF functionality anywhere in the console. For more details, see Working with the console.

Security in your use of the AWS Shield network security director

Note

The AWS Shield network security director public preview has now ended and the console is no longer accessible. For more information about AWS Shield network security director, contact AWS Support or an AWS Sales Representative.

This section describes the key security considerations for using this network security director preview.

Data sources

When you run an analysis, network security director retrieves information about your AWS resources using public AWS API endpoints. The information retrieved includes resource attributes that are available to your account through the public AWS APIs.

AWS Shield network security director also uses internal AWS data sources and threat intelligence to identify findings and recommend remediations.

Data encryption

Review the following encryption considerations when using network security director.

  • Encryption at rest – All data is protected at rest.

  • Encryption in transit – All data is protected in transit using Transport Layer Security (TLS) encryption. All communication is authenticated using Amazon Simple Storage Service AWS Signature Version 4 (SigV4). For information about SigV4, see Authenticating Requests (AWS Signature Version 4) in the Amazon S3 User Guide.

  • Key management – Customer-managed keys are not currently supported.

Topics