Security, compliance, and governance
AWS Services and Features for Securing AI Systems
AI systems often process sensitive data such as personal, financial, and proprietary information, so a breach has legal and financial consequences.
Shared responsibility model
Start security planning here.
- AWS: security of the cloud. Physical facilities, hardware, the host operating system, and the virtualization layer.
- Customer: security in the cloud. Customer data, applications, IAM, guest operating system, network and firewall configuration, client-side and server-side encryption, and network traffic protection.
Your share depends on which services you use: more managed services means less for you to handle.
Four foundational security services
| Service | Security domain | Purpose |
|---|---|---|
| AWS KMS | Data protection | Encryption with AWS managed or customer managed keys |
| AWS Security Hub | Incident response | One dashboard of security findings, with automated playbooks |
| Amazon GuardDuty | Threat detection | Detects suspicious activity and unauthorized behavior |
| AWS Shield Advanced | Network and application protection | Managed DDoS protection |
The course card for Shield Advanced repeats the GuardDuty text by mistake. Shield Advanced is AWS's DDoS protection service.
Services by job
| Job | Services |
|---|---|
| Find sensitive data before training | Amazon Macie: ML-based discovery of PII, PHI, and financial data in S3 |
| Manage identities and access | AWS IAM (users, groups, roles, policies), IAM Identity Center, IAM Access Analyzer for least privilege |
| Zero trust access | AWS Verified Access (no VPN needed), Amazon Verified Permissions |
| ML-specific roles | SageMaker Role Manager: preconfigured personas for data scientist, MLOps, and SageMaker compute |
| Stop data exfiltration | Amazon VPC, AWS Network Firewall (deep packet inspection), AWS PrivateLink (private connection from your VPC to Amazon Bedrock without the internet) |
| Detect threats | GuardDuty, Inspector (vulnerabilities), Amazon Detective (forensic investigation) |
| Automate incident response and compliance | Security Hub, Config, Audit Manager, Artifact |
| Protect web apps | AWS WAF (web exploits, bots, account takeover), Shield Advanced, Firewall Manager |
Macie is the answer for finding PII in S3. PrivateLink is the answer for reaching Bedrock without the public internet.