- To provide on-demand access to AWS compliance reports and agreements
- To monitor and record account activity for compliance auditing
- To assess the security state of your AWS resources
- To protect web applications from common web exploits