Security, Identity, & Compliance
Securely run your business with the most flexible and secure cloud computing environment available. Benefit from AWS data centers and a network architected to protect your information, applications, and devices. Meet core security requirements, such as data locality, protection, and confidentiality with our comprehensive services and features.
Recent questions
see all1 / 18
- I am investigating an AWS Systems Manager Run Command authorization failure on a Windows EC2 instance. The SendCommand API call succeeds and returns a CommandId, but the subsequent command invocation...
- is ACR/AMR generally available yet, and is there an account-level enablement? it was announced in SDK v3.1146.0 (Oct 2 2026) but appears inactive for our account. what we see on Essentials pools with...
- Our AWS account was compromised through an access key. Unfortunately, we missed the initial AWS notifications, and the account has now been suspended. AWS's instructions require us to access the acco...
- We are experiencing a recurring security/sending issue with Amazon SES in the US East (Ohio) / us-east-2 region and would appreciate technical guidance on identifying the root cause and preventing it ...
- I am evaluating Amazon Cognito User Pools for an application that uses the OIDC pair (iss, sub) as the durable external identity key. AWS documentation states that the Cognito sub attribute is unique...
- I am using an AWS Free Tier account for an academic Data Engineering project. I am trying to use AWS Glue Crawler. I have created the required IAM role and the IAM role validation is successful. How...
- The Functor Model learns by modifications to model functions rather than parameters. This is a mathematical proof of distribution equivalence - https://zenodo.org/records/23125183 This document (https...
asked 3 days ago
- We run AWS Backup with a daily rule that copies an Aurora PostgreSQL cluster snapshot from a source account to a destination account in the same AWS Organization. The local backup completes every day....
- I have an ACM public certificate in us-east-1 for: - bienestarestudiantil.com.ar - www.bienestarestudiantil.com.ar Managed renewal is stuck in PENDING_VALIDATION only for: www.bienestarestudiantil.com...
- Currently recieving the following error when accessing the applications management page for Identity Centre. ``` The page has failed to load. relativeURL must be a relative path, not an absolute URL....
- I want to know whether preferred_username claim is only present in AWS Cognito ID token only or can it be present inside Access token as well? If not, How I can bring preferred username in access tok...
- Hi AWS Community, I am configuring SMS-based Multi-Factor Authentication (MFA) using Amazon Cognito and AWS End User Messaging SMS in the us-east-1 region. I need to send OTP messages to users in bo...
asked 6 days ago
- Hello AWS Community / AWS Support Staff, I'm posting here as a last resort. I'm the account owner, and I'm locked out of customer-managed KMS keys left behind by an abandoned test deployment. They ke...
- Does AWS Cognito provides any sid (Session ID in OIDC) like claim in JWT Access Token to know about logged in session ? If not, how we can track logged in session via claims if any such identifier is ...
- Is it safe to call /.well-known/openid-configuration from AWS Cognito directly from browser? Or can it result in CORS issues? If it can result in CORS, is there any way to customize cors for such cogn...
- ### SESv2 SendEmail returns AccessDeniedException although IAM Policy Simulator allows the request This is a follow-up to an earlier resolved question about the default configuration set. An AWS re:P...
- KMS's service-principal allowlist in us-gov-west-1 recognizes the GLOBAL form network-firewall.amazonaws.com but not the REGIONAL form network-firewall.us-gov-west-1.amazonaws.com. Every CreateGrant e...
- Summary Please add a native Export and Import capability for IAM Policies in the AWS console, scoped to accounts within the same AWS Organization. This would allow practitioners to replicate a policy...
asked 7 days ago
Recent Knowledge Center content
see all1 / 18
Recent articles
see all1 / 18
EdoardoEXPERT
published 3 days ago1 votes46 views
This article explains how to get a readable email the moment access changes on the AWS accounts you choose to monitor, covering both IAM Identity Center and local IAM. The solution fills the gap left ...Sandip SamantaEXPERT
published 4 days ago0 votes41 views
Amazon SageMaker Unified Studio (SMUS) projects often fail when they move from exploration to production-adjacent machine learning (ML) pipelines. Larger instance types and non-interactive runs expose...SwaathiEXPERT
published 5 days ago2 votes78 views
Developers automating the AWS Identity Store often can't tell whether an AccessDeniedException is an IAM policy issue or a customer managed key failure. This article shows how to use the exception's R...Tolu Okuboyejo - AWSEXPERT
published 8 days ago0 votes56 views
When an Amazon Redshift cluster slows down, CloudWatch shows the symptom—high CPU and commit-queue pressure—but not which queries caused it or how to fix them. Answering that traditionally required a ...KayoEXPERT
published 8 days ago0 votes95 views
AWS may ask you to verify your identity when you request access to certain products, features, or programs. We only use your verification data to confirm who you are. If you choose not to verify your ...Manish MishraEXPERT
published 9 days ago0 votes61 views
AWS DevOps Agent can investigate incidents autonomously, but its built-in Security Lake access can't complete Athena queries against VPC Flow Logs. This article shows how to give the agent reliable, r...Arpitha ShivannaEXPERT
published 12 days ago0 votes72 views
A practical blueprint for running one shared AWS account across many teams — keeping the efficiency of consolidation while enforcing strong isolation, cost discipline, and governance at scale.Abdullah KaramanEXPERT
published 13 days ago0 votes112 views
Some assume AWS DevOps Agent cannot monitor deployments and correlate code changes when the pipeline is AWS CodePipeline and the repository is AWS CodeCommit, since its documented supported CI/CD prov...Aadil FaizeeEXPERT
published 18 days ago1 votes137 views
AWS DevOps Agent ships native telemetry integrations for CloudWatch, Datadog, Dynatrace, New Relic, Splunk, and Grafana, but not Honeycomb. This article shows how to connect Honeycomb anyway, in both ...Mario SagethEXPERT
published 21 days ago0 votes153 views
For semiconductor teams, design IP and ingested third-party/vendor datasets are both high-value and high-risk. AWS Backup protects design-data buckets with point-in-time and long-retention recovery, w...published 25 days ago0 votes117 views
A financial-services SRE team connected its self-managed APM to AWS DevOps Agent, then hit the real problem: the managed, AWS-hosted model reads that telemetry — and it holds regulated data. The artic...JuhiEXPERT
published 25 days ago0 votes124 views
This article walks through creating an Amazon CloudWatch telemetry pipeline that ingests Okta system logs using the okta_sso source, processes them through the OCSF processor, and delivers them to a C...Rosa LlorenteEXPERT
published a month ago0 votes128 views
Centralized traffic inspection with Transit Gateway and Network Firewall often inspects far more than necessary, and per-GB charges dominate at scale. This post shows how three Transit Gateway feature...Abdullah KaramanEXPERT
published a month ago0 votes309 views
AWS DevOps Agent's native code integration covers GitHub, GitLab, and Azure DevOps, but not Bitbucket at this time. This article shows how to register the Atlassian Rovo MCP server as a capability pro...N_AgarwalEXPERT
published a month ago0 votes156 views
AWS Continuum launched in June 2026 as the new umbrella for AWS's security capabilities — yet no community guide exists on re:Post to help practitioners understand which capability to use when or how ...SaurabhEXPERT
published a month ago1 votes163 views
This article shows how AWS DevOps Agent autonomously diagnoses Amazon MWAA (Airflow) pipeline failures such as broken DAGs, task exceptions, and retry exhaustion by correlating CloudWatch alarms, metr...
Ogawa_FSUPPORT ENGINEER
published a month ago0 votes562 views
This article provides guidance for Kiro administrators on Kiro concepts, key considerations for operating Kiro in accordance with organizational governance requirements, and how to set up and operate ...naveen-awsEXPERT
published 2 months ago0 votes110 views
Adopting Amazon DevOps Agent across multiple AWS accounts requires deploying an IAM role and creating an association for each secondary account. StackSets automates the IAM role but cannot create asso...
Recent selections
see all1 / 13
AWS OfficialMODERATOR
published 3 months ago1 votes347 views
This spotlight on AWS Certificate Manager (ACM) equips you with the skills and troubleshooting tips to get the most out of a powerful service.- AWS OFFICIALUpdated 5 months ago1 votes337 viewsAWS Official content is created by a team of technical experts, professional writers, and editors within AWS. They work together to make sure that the information is clear, comprehensive, and aligned ...
AWS OfficialMODERATOR
published 6 months ago0 votes294 views
This spotlight on AWS IAM equips you with skills and troubleshooting best practices to secure and manage access to your AWS resources effectively.AWS OfficialMODERATOR
published a year ago1 votes461 views
This spotlight on Amazon Cognito equips you with the skills and troubleshooting best practices to get the most out of this cost effective service.AWS OfficialEXPERT
published 2 years ago0 votes1.1K views
This spotlight on IAM equips you with the skills and troubleshooting tips to get the most out of a powerful service.- AWS OFFICIALUpdated 2 months ago14 votes42.5K viewsThe AWS Trust & Safety Center provides curated knowledge of AWS resources that can assist you in your cloud journey.
Osvaldo MarteEXPERT
published 2 years ago2 votes18.8K views
This selection focuses on the essential AWS networking services, providing a comprehensive overview of tools and technologies available to build and manage secure, scalable, and high-performing networ...Antonio LagrotteriaEXPERT
published 2 years ago4 votes28.5K views
A selection of architectural patterns and tips to leverage secure cross-account APIs, showing ingress, egress and inspection reference architecturesJonathan_DEXPERT
published 3 years ago4 votes12.6K views
Do you have critical workloads running in AWS? Review these handpicked resources to find ways to ensure your applications are resilient to failures.- AWS OFFICIALUpdated 3 years ago0 votes146 viewsThis selection includes content and solutions supporting FSI related compliance and requirements covering security, immutable storage, and general guidance.
- AWS OFFICIALUpdated 3 years ago0 votes364 viewsAs a best practice, AWS recommends that you use AWS Identity and Access Management (IAM) roles instead of IAM users with long-term credentials such as access keys.
- AWS OFFICIALUpdated 3 years ago0 votes84 viewsAccelerate your business transformation goals with a managed service that combines compute, network and storage capabilities in a fully supported, ready-to-run service from VMware and AWS.
- AWS OFFICIALUpdated 3 years ago0 votes8.3K viewsAre you getting 403 Access Denied errors with your Amazon Simple Storage Service (Amazon S3) operations? Review this list of handpicked resources to identify the root cause and troubleshooting instruc...
1 / 18
Riku_Kobayashi
EXPERTGary Mclean
EXPERTsecondabhi_aws
EXPERTKidd Ip
EXPERTOleksii Bebych
EXPERTGreg
EXPERTFlorian Turnwald
EXPERTOsvaldo Marte
EXPERTIsaac Behrens
EXPERTSedat SALMAN
EXPERTAdeleke Adebowale .J.
EXPERTTushar Jagdale
EXPERTMatt Barbieri
EXPERTAWS-User-alantam
EXPERTIndranil Banerjee AWS
EXPERTTakahito Iwasa
EXPERTMassimilianoAWS
EXPERTGK
EXPERT
Learn AWS faster by following popular topics
1 / 4
