AWS Trusted Advisor is an online tool that provides real-time guidance to help you provision your resources following AWS best practices. One of its core functions is to inspect the AWS environment and make recommendations for saving money, improving system performance, and closing security gaps. The Security category of Trusted Advisor includes a specific check for "Security Groups - Unrestricted Access," which identifies security group rules that allow unrestricted inbound traffic (from 0.0.0.0/0) to potentially vulnerable ports, including SSH (port 22). This directly addresses the user's requirement.

A. Amazon Cognito: This service provides identity management for web and mobile applications, handling user sign-up, sign-in, and access control. It does not analyze infrastructure security configurations like security groups.

B. AWS Shield: This is a managed Distributed Denial of Service (DDoS) protection service. It safeguards applications running on AWS from malicious traffic but does not audit security group rules.

C. Amazon Macie: This is a data security service that uses machine learning to discover, classify, and protect sensitive data stored in Amazon S3. It does not inspect network security settings.

1. AWS Trusted Advisor Documentation: "The Security category includes checks that help you secure your AWS services... For example

we check for security groups with unrestricted access..."

Source: AWS Trusted Advisor Documentation

"AWS Trusted Advisor check reference"

Security category. (Specifically

the "Security Groups - Unrestricted Access" check description).

2. AWS Trusted Advisor Documentation: "Checks security groups for rules that allow unrestricted access to specific ports. Unrestricted access (0.0.0.0/0) increases opportunities for malicious activity (hacking

denial-of-service attacks

loss of data). The ports with the highest risk are flagged."

Source: AWS Trusted Advisor Documentation

"Security Groups - Unrestricted Access" check details.

3. Amazon Cognito Documentation: "Amazon Cognito handles user authentication and authorization for your web and mobile apps."

Source: AWS Documentation

"What Is Amazon Cognito?".

4. AWS Shield Documentation: "AWS Shield is a managed distributed denial of service (DDoS) protection service that safeguards applications running on AWS."

Source: AWS Documentation

"What is AWS Shield?".

5. Amazon Macie Documentation: "Amazon Macie is a data security service that discovers sensitive data by using machine learning and pattern matching..."

Source: AWS Documentation

"What is Amazon Macie?".