AWS Cloud Security: Security, Identity and Compliance Reviews - Page 6

Easily configure WAF to filter, monitor and block any malicious traffic traveling to the web application and API Gateways ensuring the traffic is safe and identify and stop any malicious traffic Review collected by and hosted on G2.com.

it is not possible to extend AWS WAF for applications built outside AWS (on-premise or any other cloud). AWS WAF cannot be deployed directly to EC2 instances and can only be associated with ALB , CloudFront & API Gateway Review collected by and hosted on G2.com.

AWS WAF is a pay-as-you-go service so we will pay for what we use this is scalable reliable and easy to use. We continue using the CLI Command line interface, which does not require GUI. Review collected by and hosted on G2.com.

If is it pay as you go service this will be expensive for high-traffic websites and it will generate a lot of traffic where the bill spikes will be high and expensive Review collected by and hosted on G2.com.

The best part is it handles creating ,storingand renewing private and public ssl/tsl certificate and certificate can also be imported for integrated AWS services.

It protects infinite number of subdomain. Review collected by and hosted on G2.com.

You cannot use these certificate outside AWS Review collected by and hosted on G2.com.

Mostly I have used IAM for giving permission of My SQS to configure my lambda function for it. So whenever I will call SQS from lambda function. it will call co figured lambda function Review collected by and hosted on G2.com.

We have to configure each time and it's to slow when we configure lambda Review collected by and hosted on G2.com.

It is a service that makes it easy to provision, manage, and deploy SSL/TLS certificates for use with AWS services and it automatically renews itself. Earlier when I was not familiar with the ACM I had to manually renew the certificate once it expires. Also, it integrates with ELB, and API Gateway seamlessly. Review collected by and hosted on G2.com.

There are one or two things that I don't like about ACM. These are as follows:

1. It is not available in all regions

2. Still no wildcard support so I had to create an alternate certificate to cater to this issue. Review collected by and hosted on G2.com.

In cloud environment where security is one of the major concern and need today aws iam is like a blessing where you can provide access to a user as per the needs i.e. provide access only on those services which are needed instead of providing generalised access.

The best part is you can provide policy based access to the user by adding specific policies to the role. Review collected by and hosted on G2.com.

The only drawback I fell in aws IAM is that a user cannot add more than 10 policies to a role i.e a role cannot have more than 10 permissions. I believe this should be improved because there are use cases where a role may have more than 10 policies attached. Review collected by and hosted on G2.com.

I used guard duty n inspector n these are very good services, they can provide security alerts after scanning aws resources. Review collected by and hosted on G2.com.

Nothing to say everything work at very nice level Review collected by and hosted on G2.com.

Thanks to AWS Cognito for handling authentication and authorization for many applications I build. I liked the integration with the API gateway Cognito authorizer and also, implemented the Cognito Identity Pool feature, this way I can integrate social Identities for my app and secure my backend resources based on IAM roles. Review collected by and hosted on G2.com.

For now, no such dislike for Cognito, but earlier, it was difficult to add custom logic for Cognito, thanks to Lambda triggers. Review collected by and hosted on G2.com.

It reduces the effort to collect and prioritize security findings across accounts from integrated AWS services and AWS partner products Review collected by and hosted on G2.com.

Very expensive. You would need a large budget for this Review collected by and hosted on G2.com.

Very easy to deploy and configure. There are managed rules and custom rule creation. Review collected by and hosted on G2.com.

Log should contain more details about attack type and reason for block. Review collected by and hosted on G2.com.