-
Notifications
You must be signed in to change notification settings - Fork 1
AWS Security Notes
Jason Lewis edited this page Jun 23, 2022
·
1 revision
- Used to access AWS resources from outside AWS.
- Use policies to determine access.
- Used to log into the AWS Console itself.
- Used to allow code running outside AWS access to AWS resources.
- Used to access AWS resources that don't live within an AWS VPC/Subnet environment from other AWS resources.
- Use policies to determine access.
- Groupings of access rules attached to User/Roles.
- A firewall used to limit access to groups of resources within a VPC.
- Resources from any subnet/AZ can be in the same security group.
- Stateful firewall so you only need to set a single rule (response is automatically included).
- Rules can target an IP address or another security group (to allow all resources in that group access).
- A subnet level firewall used to limit access into and out of a subnet.
- Stateless firewall so you need to set two rules for each request (request and response).