The team is organizing the roles of several AWS security services.
Select the service for aggregating findings and the service for DDoS protection.
Choose TWO correct service-role pairs.
Security Hub aggregates and prioritizes findings from security services, while Shield provides managed DDoS protection for applications.
Detailed explanation
IAM manages access credentials; Shield focuses on DDoS protection.
IAM manages access credentials; Shield focuses on DDoS protection.
Shield provides managed protection against distributed denial-of-service attacks at the application edge.
Shield provides managed protection against distributed denial-of-service attacks at the application edge.
AWS KMS creates and manages encryption keys; Security Hub is for security findings.
AWS KMS creates and manages encryption keys; Security Hub is for security findings.
Security Hub receives findings from services such as GuardDuty and Inspector and helps correlate and prioritize them.
Security Hub receives findings from services such as GuardDuty and Inspector and helps correlate and prioritize them.
Check official documentation
Compare the following points with the official documentation.
AWS Security HubのIntroductionとAWS Shield Standard overviewを確認する。
What to confirm
Security Hubは検出結果の統合、ShieldはDDoS検出・緩和として整理される。
Key points
- AWS Security Hub
- AWS Shield
- Finding aggregation
- DDoS protection
Notes
- Environment: AWS公式Security Hub・Shieldドキュメントの確認
- Confirm current service capabilities and compliance guidance in the official AWS documentation.
Foundation review
Security operations
Security Hub provides a consolidated view across detection services.
Perimeter protection
Shield addresses DDoS threats at the application entry path, not IAM or key management.