**Introducing a new console experience for Amazon WAF**

You can now use the updated experience to access Amazon WAF functionality anywhere in the console. For more details, see [Working with the console](https://docs.amazonaws.cn/waf/latest/developerguide/working-with-console.html). 

# Security in your use of the Amazon Shield network security director
<a name="nsd-security"></a>

**Note**  
Amazon Shield network security director is in public preview release and is subject to change. 

This section describes the key security considerations for using this network security director preview.

**Data sources**  
When you run an analysis, network security director retrieves information about your [Amazon resources](https://www.amazonaws.cn/resourceexplorer/) using public Amazon API endpoints. The information retrieved includes resource attributes that are available to your account through the public Amazon APIs.

Amazon Shield network security director also uses internal Amazon data sources and threat intelligence to identify findings and recommend remediations.

**Data encryption**  
Review the following encryption considerations when using network security director.
+ **Encryption at rest** – All data is protected at rest.
+ **Encryption in transit** – All data is protected in transit using Transport Layer Security (TLS) encryption. All communication is authenticated using Amazon Simple Storage Service Amazon Signature Version 4 (SigV4). For information about SigV4, see [Authenticating Requests (Amazon Signature Version 4)](https://docs.amazonaws.cn/AmazonS3/latest/API/sig-v4-authenticating-requests.html) in the *Amazon S3 User Guide*.
+ **Key management** – Customer-managed keys are not currently supported.

**Topics**
+ [Identity and Access Management for Amazon Shield network security director](nsd-iam.md)
+ [Identity-based policy examples for Amazon Shield network security director](security-nsd-with-iam-id-based-policies.md)
+ [Using service-linked roles for Amazon Shield network security director](security_iam_nsd-with-iam-roles-service-linked.md)