Security, Identity, & Compliance
Securely run your business with the most flexible and secure cloud computing environment available. Benefit from AWS data centers and a network architected to protect your information, applications, and devices. Meet core security requirements, such as data locality, protection, and confidentiality with our comprehensive services and features.
Recent questions
see all1 / 18
- Hello AWS Support and Community Moderators, We are requesting assistance with an unresolved billing dispute involving unauthorised Amazon Bedrock charges arising from a compromised member account. A...
- An IAM user's StartInstances request for an existing EC2 instance is accepted, but the instance returns to Stopped with Client.InvalidKMSKey. The attached EBS volume uses an enabled AWS-managed KMS ke...
- We are investigating an unexpected HTTP 403 issue affecting a production Amazon CloudFront distribution. The distribution had been operating normally, with no known configuration changes immediately ...
- Hi community, We have several Critical and High severity Amazon Linux vulnerabilities reported in Amazon Inspector on our EC2 instances. Current status: **Status: Pending for > 15 days Fix Available:...
- ## Problem We are experiencing an issue when creating Amazon Cognito custom domains using the `CreateUserPoolDomain` API. The operation consistently fails with the following error: ```text InvalidPa...
- We use an Ohio (`us-east-2`) development user pool in a new-signup AWS Free-plan project: - Essentials feature plan - Managed login, Original issuer - Native admin-created users; public signup disabl...
- Workspace: g-faba4f9f70 (ap-southeast-2) Account: 238663102864 Grafana version: 12.4.3 Identity Center instance: ssoins-82598c0b7b7a9125 (org instance, management account 992382375457) All SSO logins...
- ## Issue I am experiencing a persistent **HTTP 400 Bad Request** when running `aws login` with an IAM user on Windows. Normal AWS Management Console login works successfully with the same IAM user a...
- Hi WAF team, how can we get our signer added to Bot Control's Web Bot Auth key registry, so our signed requests are labelled web_bot_auth:verified rather than unknown_bot? Riggle (riggleapi.com) help...
- I am investigating an unexpected IAM Custom Policy Simulator result involving lambda:SourceFunctionArn. I am not using simulation results as live permission proof, and I do not want to remove the sour...
- Hello AWS Team, Our startup was approved for Kiro Pro+ under the AWS Startup Credits program. During our initial IAM Identity Center setup in us-east-1, an automated security heuristic locked our use...
- Consider a hypothetical web application that allows users to upload profile pictures, listing images, and private documents. Amazon S3 is used for object storage, and Amazon CloudFront is being consid...
- I'm using choice-based sign-in (`USER_AUTH`) with email OTP as the first factor and a custom email sender Lambda. The Lambda is invoked with `triggerSource: CustomEmailSender_Authentication`, but `req...
- ## Problem I recently configured AWS IAM Identity Center for a new AWS Organization with three accounts. Since October 13, 2026, I have been unable to successfully assign users or groups to either of...
- Hi everyone, I'm working on a personal MCP server hosted on **Amazon Bedrock AgentCore Runtime**, using Amazon Cognito for OAuth authentication. Everything is configured with Authorization Code + PK...
- My exam session was completed successfully without any proctor warnings or irregularities. Given my months of honest preparation, receiving a revocation notice was extremely disheartening. I request a...
- Hello AWS community, I am reviewing the least-privilege IAM permissions for the DynamoDB `DescribeTable` API operation and would appreciate clarification of the documented authorization requirements....
- Hi AWS Support team, This is a follow-up to my earlier question about our suspended account ("Account suspended for non-payment, reinstatement deadline is today, 2 support cases with no response"). W...
Recent Knowledge Center content
see all1 / 18
Recent articles
see all1 / 18
- AWS OFFICIALUpdated 2 days ago0 votes38 viewsThis article details how to test backups and restore critical workloads in priority order after a ransomware event on AWS. It’s the third part of a 3-part series.
- AWS OFFICIALUpdated 2 days ago0 votes30 viewsThis article details how to build an isolated, immutable backup foundation for ransomware recovery on AWS. It’s the second part of a 3-part series.
- AWS OFFICIALUpdated 2 days ago0 votes27 viewsThis article details how to design a ransomware recovery architecture that aligns with National Institute of Standards and Technology (NIST). It’s the first part of a 3-part series.
LokeshEXPERT
published 2 days ago0 votes23 views
This article shows how to enable directed actions so the agent's reach is limited by controls you own. Those controls are least-privilege elevated roles, SCP and permissions-boundary backstops, and Cl...- AWS OFFICIALUpdated 2 days ago0 votes41 viewsDiscovered an exposed AWS access key? This third installment in our series is a step-by-step recovery playbook for containing the damage—from locking down the compromised key and rooting out unauthori...
- AWS OFFICIALUpdated 3 days ago0 votes35 viewsThis second part describes the structures that let agentic operations scale past a few teams, covering how a small center of excellence distributes capability instead of becoming a bottleneck, how to ...
- AWS OFFICIALUpdated 3 days ago0 votes29 viewsThis first part describes how to prepare the people side of agentic operations, covering the role profiles that emerge as execution shifts to agents, the reskilling and knowledge capture that keep har...
- AWS OFFICIALUpdated 3 days ago0 votes45 viewsThis article describes how to build agent infrastructure that holds up under investigation, covering the telemetry and immutable storage that make an agent's actions reconstructable months later, the ...
- AWS OFFICIALUpdated 3 days ago0 votes43 viewsThis article describes how to keep agent spending attributable and bounded as usage grows, covering the separate layers an agentic workload bills across, the tagging and reporting setup that attribute...
- AWS OFFICIALUpdated 2 days ago0 votes48 viewsThis article describes how to connect agents to the systems that hold your operational knowledge, covering the shared tooling, ownership principles, and credential boundaries that keep a growing agent...
- AWS OFFICIALUpdated 3 days ago0 votes37 viewsThis article describes how to run agents as production systems rather than experiments, covering the testing, observability, and rollback practices that keep agent behavior predictable as prompts, mod...
- AWS OFFICIALUpdated 3 days ago0 votes42 viewsThis article describes how to establish governance before agents reach production, covering the data groundwork that determines what agents can be trusted with, the enforcement points that apply polic...
AWS OfficialEXPERT
published 3 days ago0 votes23 views
This article describes how to establish governance before agents reach production, covering the data groundwork that determines what agents can be trusted with, the enforcement points that apply polic...- AWS OFFICIALUpdated 2 days ago0 votes163 viewsA practical guide to adopting agentic operations: the concerns teams raise before they start, the AWS services worth evaluating before you build anything yourself, and a roadmap that runs from leaders...
- AWS OFFICIALUpdated 2 days ago0 votes36 viewsDiscovered an exposed AWS access key? Before you rotate anything, size the risk. This eight-step guide walks you through mapping the key's permissions and exposure window, classifying the severity, ch...
- AWS OFFICIALUpdated 2 days ago0 votes37 viewsThis is the first of three articles on managing exposed AWS access keys, starting with prevention, then evaluating the risk when a key is exposed, and recovering after a compromise. See the end of thi...
Manish MishraEXPERT
published 3 days ago0 votes53 views
Many teams are adopting AWS DevOps Agent — the always-available teammate that reviews code for release readiness, autonomously investigates incidents, and drives proactive site reliability across AWS,...VivekEXPERT
published 11 days ago0 votes88 views
Large enterprises often run one centralized ServiceNow instance while giving each business unit its own AWS DevOps Agent Space. ServiceNow can route to multiple spaces natively, but that means one Bus...
Recent selections
see all1 / 13
AWS OfficialMODERATOR
published 3 months ago1 votes391 views
This spotlight on AWS Certificate Manager (ACM) equips you with the skills and troubleshooting tips to get the most out of a powerful service.- AWS OFFICIALUpdated 6 months ago1 votes346 viewsAWS Official content is created by a team of technical experts, professional writers, and editors within AWS. They work together to make sure that the information is clear, comprehensive, and aligned ...
AWS OfficialMODERATOR
published 6 months ago0 votes305 views
This spotlight on AWS IAM equips you with skills and troubleshooting best practices to secure and manage access to your AWS resources effectively.AWS OfficialMODERATOR
published a year ago1 votes471 views
This spotlight on Amazon Cognito equips you with the skills and troubleshooting best practices to get the most out of this cost effective service.AWS OfficialEXPERT
published 2 years ago0 votes1.1K views
This spotlight on IAM equips you with the skills and troubleshooting tips to get the most out of a powerful service.- AWS OFFICIALUpdated 2 days ago14 votes43.1K viewsThe AWS Trust & Safety Center provides curated knowledge of AWS resources that can assist you in your cloud journey.
Osvaldo MarteEXPERT
published 2 years ago2 votes18.8K views
This selection focuses on the essential AWS networking services, providing a comprehensive overview of tools and technologies available to build and manage secure, scalable, and high-performing networ...Antonio LagrotteriaEXPERT
published 3 years ago4 votes28.5K views
A selection of architectural patterns and tips to leverage secure cross-account APIs, showing ingress, egress and inspection reference architecturesJonathan_DEXPERT
published 3 years ago4 votes12.6K views
Do you have critical workloads running in AWS? Review these handpicked resources to find ways to ensure your applications are resilient to failures.- AWS OFFICIALUpdated 3 years ago0 votes159 viewsThis selection includes content and solutions supporting FSI related compliance and requirements covering security, immutable storage, and general guidance.
- AWS OFFICIALUpdated 3 years ago0 votes375 viewsAs a best practice, AWS recommends that you use AWS Identity and Access Management (IAM) roles instead of IAM users with long-term credentials such as access keys.
- AWS OFFICIALUpdated 3 years ago0 votes94 viewsAccelerate your business transformation goals with a managed service that combines compute, network and storage capabilities in a fully supported, ready-to-run service from VMware and AWS.
- AWS OFFICIALUpdated 3 years ago0 votes8.3K viewsAre you getting 403 Access Denied errors with your Amazon Simple Storage Service (Amazon S3) operations? Review this list of handpicked resources to identify the root cause and troubleshooting instruc...
1 / 18
Riku_Kobayashi
EXPERTGary Mclean
EXPERTsecondabhi_aws
EXPERTKidd Ip
EXPERTOleksii Bebych
EXPERTGreg
EXPERTFlorian Turnwald
EXPERTOsvaldo Marte
EXPERTIsaac Behrens
EXPERTSedat SALMAN
EXPERTAdeleke Adebowale .J.
EXPERTTushar Jagdale
EXPERTMatt Barbieri
EXPERTAWS-User-alantam
EXPERTIndranil Banerjee AWS
EXPERTTakahito Iwasa
EXPERTMassimilianoAWS
EXPERTGK
EXPERT
Learn AWS faster by following popular topics
1 / 4
