AWS Cloud Security: Security, Identity and Compliance Reviews - Page 4

Aws security hub maintains security posture of the environment, It is a good tool for listing out all the high, low, medium priorty alerts and the remediation steps. It is integrated with all the services of aws like s2, cloudwatch, kms etc.It is very easy to use as All the alerts are at one place.we also have customer suppory available. Review collected by and hosted on G2.com.

I liked the product overall. There is no issue from my side. Review collected by and hosted on G2.com.

AWS native WAF can be easily integrated with Application Load Balancer with which we can allow Internet bound Inbound traffic directly on ALB. Same ALB can be protected by AWS Shield, with this we can achieve DDoS L3, L4 & L7 protection. Also AWS WAF supports third party vendor managed rules i.e. F5, Imperva etc to add in WEB ACL Review collected by and hosted on G2.com.

AWS managed WAF rules has limitations of protecting against OWASP top 10 attack pattern i.e. if you change SQL injection attack pattern, AWS Managed WAF rules failed to block it. AWS needs to work on such sort of things. Review collected by and hosted on G2.com.

The interface is quite friendly to use, it guides you during the whole process for creation, which is nice. It provides a comprehensive guide on what happens when you decide to go for different configuration options. It can detect the DNS changes super quickly, making iteration faster. Review collected by and hosted on G2.com.

Maybe the least helpful thing is that it doesn't tell you that when creating a certificate that has more than one name, the DNS records can be the same, which is quite confusing. Review collected by and hosted on G2.com.

AWS provides a brief control over the infrastructure security, but two features i like the most are

1. AWS Security Hib.

Its a CSPM (Cloud Security Posture Management) solution for AWS that provides automated & continuous best practices security check on AWS resources.

2.AWS Amazon Inspector

It check the cloud apps & identify the vulnerabilities like Remote Code Execution, XSS and SQLi.

3. very good customer support

AWS customer support is very good for the customer handholding.

These features makes AWS one of the most secure cloud service. Review collected by and hosted on G2.com.

AWS cloud service has very good security features but the admin has to be well-versed with these advanced features to configure them properly and get the benefit. e.g. If S3 bucket or AMI are inappropriately configured they can make unauthorized users to access the critical org resources. A properly trained & certified admin should be assigned to configure the security features carefully. Complexity is enemy of security & trained resource is the key to avoid this threat. Ease of implementation and ease of use are the features that should be improved although a very good customer support makes this easier for new customers. Review collected by and hosted on G2.com.

AWS WAF is the web based firewall which has built-in DDOS attack protection to stop any DDOS attacks. Also, the AWS support team quickly responds to the queries or concerns raised. Review collected by and hosted on G2.com.

There is no dislike about AWS WAF as it has good features. Review collected by and hosted on G2.com.

The userlevel access control with fully customisable access and also the user groups concept really help out to avoid redundant process for access management for each new user. Review collected by and hosted on G2.com.

Better UI as per my experience it was bit overwhelming with tons of drop-downs options as a beginner Review collected by and hosted on G2.com.

We all know Certificate Manager is used for the secure communtion between two parties like iot devices and backend services. Aws Certificate manager is easy to use easy to create the cerficates, Using the certificate we can implementate our backend code easyly. and also easy integration with the golang we have prettified aws packages Review collected by and hosted on G2.com.

Nothing, it was very easy to use. In my daily work life Review collected by and hosted on G2.com.

Auto renewal of certs and application to the loadbalancers and endpoiints where they are already installed.

Takes away a lot of manual process involved with renewal and updating of ssl certs across many services.

Ease of use and validation of certs , chain and keys prior to installation.

autorenewal is a big plus. Review collected by and hosted on G2.com.

nothing so far. it works as it should and i haven't encountered any negative issues so far. Review collected by and hosted on G2.com.

IAM - Multi-factor authentication (MFA) adds another layer of security to AWS IAM by providing fine-grained control over user permissions.

Security Services: In comparison to other cloud vendors in the market, AWS offers many security services.

like Amazon guard duty and Amazon inspector.

AWS Security Hub and Amazon GuardDuty were popular services in our organization. Review collected by and hosted on G2.com.

As of now, I have not found anything bad about AWS cloud security.

Cloud Security's interface may seem a bit confusing to some users. Review collected by and hosted on G2.com.

We are using AWS WAF for securing our e-learing web applcation where we have defiened webACL rules to block unwanted traffic which can be suspicious. quite easy to impliment also provides live monitoring of traffic and can be connected with other aws services like aws cloudwatch using which user can monitor and analyze traffic. Review collected by and hosted on G2.com.

I don't think their is much to dislike about AWS WAF but still implementation can be time consuming, other than that it's one of the best web application firewall which offers pay as you go pricing. Review collected by and hosted on G2.com.