Summary

In this chapter, you learned about some of the most prevalent attacks that security engineers face. This knowledge of common attacks puts the need for security services into perspective. It also gives you an understanding of the various services you will need as you go through the rest of this book with a crucial purpose. That purpose is to not only protect your cloud assets and data but to also gain knowledge about the very common, specific types of attacks that they may face.

You also explored one of the most prevalent attacks, DDoS, in depth, including how these attacks occur and which AWS services (namely, AWS WAF and AWS Shield/Shield Advanced, among others) help mitigate them.

The next chapter will detail sections dedicated to the AWS Certified Security Specialty domains, specifically Domain 1: Incident Response. It will begin with a focus on incident response and how it is handled in the context of an AWS account (or multiple accounts).