Other security options in AWS

Apart from IAM, AWS provides other services to harden security and match the security compliances.

Let's see what services are available in AWS Console, in the security section. In the following screenshot, we can see the list of security services:

 Let's understand all these one by one.

AWS Certificate Manager

AWS Certificate Manager (ACM) helps you create and manage the TLS and SSL certificates for websites and applications that run on AWS. ACM makes the SSL certificate procurement, deployment, and renewal processes easy.

SSL certificates obtained from ACM are available for free:

ACM facilitates the importing of commercial CA-signed SSLs, which can be easily offloaded to ELB, EC2, API Gateway, and CloudFront. You can offload SSLs on ELB during or after creation.

Let's see how we offload one during the creation process:

1. First, log in to AWS Console and go to EC2. In EC2, select Load Balancers and click on Create Load Balancer. Here, you need to specify a few details...