-
Hello Radouane,
Thank you for your message and thoughtful feedback!
I understand that you are emphasizing the importance of Identity and Access Management (IAM) in controlling access to AWS resources. While IAM is crucial for allowing only authorized users to access specific resources, the main focus in this scenario is to protect applications from vulnerabilities and unintended access.
The Infrastructure Protection capability within the AWS CAF Security perspective is extensive. It encompasses the protection of cloud infrastructure, including application security through measures such as firewalls, security groups, and network segmentation. These protective controls help to secure applications against unauthorized access and potential vulnerabilities. This directly aligns with the IT Security team’s concerns regarding securing the entire infrastructure and preventing attacks.
IAM, though important for managing access control, it does not cover the entire scope of protecting the infrastructure from unauthorized access or mitigating vulnerabilities in the applications themselves.
Hence, Infrastructure Protection is the most relevant answer because it focuses on securing the entire cloud environment, including the applications running on it.
For further reading, you can visit the official AWS documentation here.
I hope this clears up the reasoning behind the answer! Please feel free to reach out if you have any further questions.
Regards,
Nikee @ Tutorials Dojo
