Security and governance
Use these guides to explore access, application protection, security findings, and governance around AWS workloads. Choose the section that matches the boundary or operational task you are working on. Network configuration and workload setup remain in their own topic guides, so you can connect them to a specific security question instead of starting from a general service list.
Start here: AWS Hybrid Cloud Security and Compliance: Practical Controls
Manage access and workload boundaries
Start with access-management or event-security questions, then explore serverless network boundaries and hybrid-cloud governance. These references cover different application and infrastructure contexts; choose the one that matches the workload you need to understand.
Protect and investigate applications
Use the WAF integration or CloudFront protection guide for a particular application context. The threat-detection and cross-account scanning guides focus on finding and coordinating security signals, while the pricing reference addresses a separate cost decision.
- AWS WAF for App Runner: Setup, Rules, and Limits
- CloudFront DDoS Protection: AWS Shield Best Practices
- AWS WAF and Shield Pricing: Costs, Billing, and What’s Included
- Detect Runtime Threats in Fargate Workloads with GuardDuty
- Amazon Inspector and Security Hub: Cross-Account Scanning
- AWS Security Hub Automation Rules: How They Work
Plan migration governance
Read the migration checklist and compliance guide alongside a migration plan. Resource inventory and change tracking can provide another view of the environment, without replacing the specific access and workload requirements of a migration.