In this section, you'll explore AWS services for securing identities, protecting data, and managing sensitive credentials. You'll begin by understanding AWS Key Management Service (KMS) and its key features for creating and managing encryption keys. As you progress, you'll explore AWS Directory Service and Amazon Cognito, learning how they support directory management, authentication, and identity management for applications and users. The section further introduces AWS Secrets Manager and its role in securely storing, managing, and retrieving sensitive credentials. Through a guided demonstration, you'll gain practical experience working with secrets. By the end of this section, you'll have a solid understanding of AWS KMS, Directory Service, Cognito, and Secrets Manager, enabling you to secure identities, encryption keys, and application credentials effectively.

In this section, you'll explore AWS security services designed to protect applications and infrastructure from common threats. You'll begin by understanding AWS WAF and AWS Shield and how they help protect applications from web-based attacks and DDoS threats. As you progress, you'll explore Amazon GuardDuty, learning how it continuously monitors AWS environments to detect suspicious activity and potential security threats. Through a guided demonstration, you'll gain practical experience with threat detection. The section further introduces Amazon Inspector, helping you understand how it identifies security vulnerabilities in workloads. Through a practical demonstration, you'll learn how to assess and improve the security of AWS resources. By the end of this section, you'll have a solid understanding of AWS WAF, Shield, GuardDuty, and Inspector, enabling you to strengthen application and infrastructure security on AWS.

In this section, you'll explore AWS services for data discovery, resource sharing, and security certificates. You'll begin by understanding Amazon Macie and how it helps discover and protect sensitive data stored in Amazon S3. As you progress, you'll gain hands-on experience creating and running Macie jobs and reviewing findings to identify potential data security risks. The section further introduces AWS Resource Access Manager (RAM) and AWS Certificate Manager (ACM), helping you understand how to securely share AWS resources and manage certificates for applications and services. By the end of this section, you'll have a solid understanding of Macie, AWS RAM, and ACM, enabling you to discover sensitive data, share resources securely, and manage certificates effectively.