AWS Security Services

This section covers Pulumi AWS Java SDK security services for identity and access management, encryption, secrets management, and security monitoring.

Services Covered

• IAM: Identity and Access Management (User, Group, Role, Policy, PolicyAttachment, AccessKey, InstanceProfile)
• Cognito: User authentication and identity pools
• KMS: Key Management Service for encryption
• Secrets Manager: Secure secrets storage
• ACM: AWS Certificate Manager for SSL/TLS certificates
• WAF: Web Application Firewall (v1, regional, v2)
• GuardDuty: Threat detection
• Security Hub: Security posture management

Additional Services

The security documentation also includes:

• ACM PCA - Private Certificate Authority
• Shield - DDoS protection
• Security Lake - Security data lake
• IAM Identity Center - Single Sign-On (SSO) management
• Identity Store - Identity directory
• Verified Permissions - Fine-grained authorization
• Verified Access - Secure application access