- To encrypt and securely store secrets, such as passwords and API keys
- To monitor and record account activity for compliance auditing
- To assess the security state of your AWS resources
- To protect web applications from common web exploits