From the course: Complete Guide to the AWS Well-Architected Framework

Unlock the full course today

Join today to access over 24,900 courses taught by industry experts.

Key AWS services for data protection

Key AWS services for data protection

- [Instructor] There are a number of key services that help us secure our data, whether it's storage services or services that help out in the encryption process or even storing secrets. First up, we have bucket policies, which can be applied, no surprise, to an S3 bucket. The bucket policy defines what users in that AWS account or what other AWS accounts can access the records in the bucket. You might consider a bucket policy more secure than an IM policy because the bucket policy is attached to the bucket, so there's no getting around what the policy is. It's attached to the resource. We also can define rules for access for applications that are hosted and running on EC2 instances, and this removes the problem of trying to use plain text passwords or IAM usernames and passwords for applications to access any AWS resources. Remember, the IAM role is also going to provide us temporary access and its security that's controlled using the Secure Token Service at AWS, so as humans don't…

Contents