IAM

1. There are AWS managed policies and customer managed policies.
2. Access keys
   1. They are fixed strings.
   2. A tool for delegating an AWS account's permissions. With one, even something that is not the account can use it.
   3. Security-wise, not a great idea.
   4. That is why roles exist.
3. IAM roles
   1. Instead of granting permissions to a user, you assign a user to a service.
   2. In normal times it is best to just create the role and assign it to a user whenever needed.

AWS CloudTrail

1. You can look up only management events and data events.
2. Has an event-generation feature.
3. Who pressed this button?
4. CloudWatch is the service for viewing more obsessively detailed metrics than this.

AWS Config

1. Are the current settings safe? What were they in the past?
2. It is like a checklist.

Amazon GuardDuty

1. A threat detection service.
2. It analyzes logs. It cannot go directly into services like EC2 or S3 to look.

AWS WAF

1. A security management service for AWS services.
2. You just set rules.
3. Used together with ACLs.

---

AWS Kinesis Family

1. A service for processing data in real time.
2. Kinesis Data Streams: the basic one.
3. Kinesis Data Firehose: stores in order, can transform data.
4. Kinesis Data Analytics: real-time analytics (used together with Streams).

---

EFS

1. EBS is fast. But it can only attach to a single EC2.
2. S3 is slow.
3. EFS is the one that is fast and usable by many at once.

FSx

1. A service for building a file server.

Transfer Family

1. A service for sending files over protocols.

DataSync

1. Data transfer between on-premises and AWS.

---

Aurora

1. Managed at the cluster (group of instances) level.
2. Great for things like read replicas.
3. Storage and backup are automatic.

DynamoDB

1. Serverless.