Security, Identity & Compliance

AWS's managed key management service — how encryption keys are created, controlled, and used across AWS services without you handling raw key material yourself.

Managed user authentication and identity for your applications — sign-up, sign-in, and temporary AWS credentials for end users, without building auth infrastructure yourself.

Filtering malicious web requests before they reach your application, and protecting against DDoS attacks at the network and application layers.

Managing many AWS accounts as one organization — centralized billing, and Service Control Policies that set permission guardrails no IAM policy within a member account can override.

Three security services that round out the AWS security toolkit: ACM for managed TLS certificates, STS for temporary credential vending, and CloudHSM for dedicated, single-tenant hardware security modules.