The cloud platform offers various security mechanisms: The Web Application Firewall (WAF) - This blocks traffic based either on patterns written by the developer or on pre-made platform patterns for known attacks. It can be deployed at the CloudFront layer, the load balancer, or the API gateway. AWS bears responsibility for the health of the WAF, while the developer is only responsible for the correctness of the rules. AWS Shield – A solution for protection against DDoS, or Distributed Denial of Service attacks. AWS Athena – Allows data to be searched in the S3 storage using SQL. The user simply has to write queries, such as through a web interface, and receive the results. AWS Macie – Allows for the discovery, classification, and protection of sensitive information within AWS. It has pre-built templates for searching for personal data, bank cards, and other similar information. AWS GuardDuty – A threat detection service capable of identifying suspicious activity on the processor or disk, attempting to guess passwords, connect to suspicious domains, and more.