Roadmap › Amazon Web Services (AWS) for .NET and Full Stack Developers › Module: Networking, Integration and Security
Lessons in this course (9)
7. Security, secrets, monitoring and governance
Intermediate★ Must knowLesson 7 of 9
- KMS — encryption keys for S3, EBS, RDS, Secrets Manager; envelope encryption.
- Secrets Manager (rotation for RDS passwords) / SSM Parameter Store — load secrets into .NET configuration (
Amazon.Extensions.Configuration.SystemsManager) via the task/instance role. - ACM — free TLS certificates for ALB/CloudFront/API Gateway with auto-renewal.
- Cognito — user sign-up/sign-in (user pools) issuing JWTs, social/SAML federation.
- WAF + Shield — web application firewall and DDoS protection on CloudFront/ALB/API Gateway.
- CloudWatch — metrics, logs (Logs Insights queries), alarms, dashboards; X-Ray/ADOT (OpenTelemetry) for traces.
- CloudTrail — audit log of every API call in the account; Config — resource compliance history; GuardDuty — threat detection; Security Hub — findings overview.
- Organizations + SCPs, tagging, Budgets and Cost Explorer for governance.