Sr.

no Security Components

1 Network WAF-AWS
2 Network ZTNA-CONNECTOR

3 Security/ Applications AWS CLOUDWATCH

4 Security/ Applications AWS CLOUDTRAIL

5 Security/ Server Infra AWS INSPECTOR

6 Security/ Applications AWS CONFIG

7 Security IAM policies & MFA for accounts/ resources

8 Security AWS Security Hub
9 Security/ Server Infra AWS Systems Patch Manager
10 Security AWS GuardDuty
11 Security Trusted Advisor
Alternatives

SAAS service F5, Radware, Barracuda, Fortinet

ForcePoint, Netscope, Zscaler
Manage Engine tools (Log360, Applications Manager or Cloud
Security Plus)
Manage Engine tools (Log360, Applications Manager or Cloud
Security Plus)

Crowdstrike, Prism Paloalto

Manage Engine tools (Log360, Applications Manager or Cloud
Security Plus)

NA
NA
Manage Engine Patch Manager
NA
NA
Description
Web Application Firewall monitors the HTTP and HTTPS requests coming to AWS infra
for accessing web applications.
Agent installed on cloud (AWS/ Azure) for connection with ZTNA cloud.
Monitoring service used for resouce optimization & metrics generation (i.e CPU
utlization, network utilization etc.)
Auditing service which generates metrics based on events(eg. login/logout, change
logs, user activities etc.)
Vulnerability management service which continuously scans AWS workloads(EC2,
container images in ECR etc.) for software vulnerabilities and unintended network
exposure.
Detailed view of configurations in AWS account, how they were configured in past
and gives visibility over configuration and relationship change over time.
IAM account policies and MFA to keep check on the user accounts and service
accounts/ their usage.
For automated response/ remediation of security threats/ recommendations.
For automated patch management of VM OS
Analyzes entire AWS environment for the potential threats
Helps to optimize the AWS infrastructure, improve security & performance etc.