Amazon GuardDuty AWS Identity and Access Management (IAM) Amazon Inspector AWS Key Management Service (AWS KMS) Amazon Macie AWS Secrets Manager AWS Shield 防范DDoS攻击的服务。 包含2层: Standard:针对web应用的普通DDoS攻击。 Advanced:可以为EC2实例,ELB,CloudFront,R...
您可以使用Amazon Inspector来自动发现漏洞以及管理Amazon Elastic Compute Cloud(Amazon EC2)实例、容器、AWS Lambda函数和确定工作负载的网络可访问性。使用Amazon GuardDuty基于机器学习的威胁模型和情报源,保护您的数据和模型免受可疑活动的侵害,并启用额外的功能,用于 EKS 保护、ECS 保护...
31 AWS 词汇表 GitHub Global Accelerator 全局一致性 全局二级索引 AWS Glue AWS GovCloud (US) 授予 授予令牌 基本实际情况 组 GuardDuty 使用 Git 进行版本控制的基于 Web 的存储库. 参考 AWS Global Accelerator 是一种网络层服务,用于创建加速器,通过 AWS 全球网络将流量引导到最佳端点.这可提高全球受众使用...
策略和合规性 (OUs).预防性防护机制会执行策略 以确保符合合规性标准.它们是使用服务控制策略和 IAM 权限边界实现的.侦测性防护机制会检测 策略违规和合规性问题,并生成警报以进行修复.它们通过使用 AWS Config,,Amazon, AWS Security Hub GuardDuty AWS Trusted Advisor,Amazon Inspector 和自定义 AWS Lambda 支票...
Amazon GuardDuty Which service would you use for centrally manage billing, control access, compliance, and security across multiple AWS accounts? AWS Organizations Which service would you use for web application protection? AWS WAF You would like to monitor some of your resources in the differen...
Amazon GuardDuty Which service would you use for centrally manage billing, control access, compliance, and security across multiple AWS accounts? AWS Organizations Which service would you use for web application protection? AWS WAF You would like to monitor some of your resources in the differen...
AWSCompute Optimizer分析实例的利用率,并为工作负载推荐最佳实例类型。此解决方案比创建仪表板并定期查看它, 或注册AWS企业支持计划并等待Trusted Advisor的建议更具成本效益。 15.OpsCenter OpsCenter是AWS系统经理的一种功能,它提供了一个中心位置,操作工程师和IT专业人员可以在这里管理与AWS资源相关的操作工作(Opsltem...
Amazon GuardDuty AWS Config Aggregator AWS Inspector Assessment Network Assessment (agentless) Network & Host Assessment (agent) Key Management Service (KMS) Customer Master Key (CMK) Data Encryption Key (DEK) CloudHSM AWS Certificate Manager (ACM) AWS Systems Manager Parameter Store AWS Secrets Manag...
However, you can also use this as a starting point. You'll need to do your homework to get a more nuanced understanding of what distinguishes the offerings from one another. Not all services are equal-- each has its own set of features and capabilities, and the functionality...
已过SAA认证,贴出知识点总结 EC2 IAM Applications that run on an EC2 instance must include AWS credentials in the AWS API requests. you can and should use an IAM role to managetemporarycredentials for applications that run on an EC2 instance. the role supplies temporary permissions that applicatio...