Security & Compliance (Domain 2)

Shared Responsibility Model

AWS is responsible for security 'of' the cloud (hardware, global infrastructure, managed services); the customer is resp

Shared responsibility — customer responsibilities

Customers manage data encryption, IAM users/permissions, network/firewall configuration, client-side and server-side enc

AWS Identity and Access Management (IAM)

A free service that controls authentication and authorization for AWS resources. It manages users, groups, roles, and po

IAM policy

A JSON document that defines permissions — what actions are Allowed or Denied on which resources. Policies are attached

IAM role

An identity with permissions that can be assumed temporarily by users, applications, or AWS services (such as EC2 instan