AWS Security Links and Resources – Cloud, IS & Business Alignment

Security

AWS Cloud Adoption Framework Security Perspective https://d1.awsstatic.com/whitepapers/AWS_CAF_Security_Perspective.pdf

AWS Security Documentation https://docs.aws.amazon.com/security/

Amazon Web Services: Overview of Security Processes

https://d0.awsstatic.com/whitepapers/aws-security-whitepaper.pdf-

AWS Well-Architected Security Labs https://wellarchitectedlabs.com/Security/README.html

Security Centre https://aws.amazon.com/security/
Security Best Practices White Papers https://aws.amazon.com/whitepapers/aws-security-best-practices/
AWS and the CLOUD Act https://aws.amazon.com/blogs/security/aws-and-the-cloud-act/
Compliance Programs https://aws.amazon.com/compliance/programs/

Security Standards and Benchmarking

Atlas – Compliance Centre https://atlas.aws
Centre for Internet Security https://www.cisecurity.org/cis-benchmarks/ CIS Benchmarks: 100+ configuration guidelines for various technology groups to safeguard systems against cyber threats.
SCAP Security Guide https://www.open-scap.org/security-policies/scap-security-guide/
A SOC 1 Report (System and Organization Controls Report) https://www.ssae-16.com/soc-1/ is a report on Controls at a Service Organization which are relevant to user entities’ internal control over financial reporting.

Secure Account Management

AWS Tasks That Require AWS Account Root User Credentials https://docs.aws.amazon.com/general/latest/gr/aws_tasks-that-require-root.html
AWS Services That Work with IAM https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_aws-services-that-work-with-iam.html AWS services grouped by their AWS product categories and include information about what IAM features they support.
How IAM evaluates policies https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_evaluation-logic.html
Policy Summaries https://aws.amazon.com/blogs/security/move-over-json-policy-summaries-make-understanding-iam-policies-easier/ Make Understanding IAM Policies Easier.
Configuring MFA-Protected API Access https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa_configure-api-require.html provides the additional security of requiring users to be authenticated with AWS multi-factor authentication (MFA) before you allow them to perform particularly sensitive actions.
AWS Process Credential Providers https://github.com/awslabs/awsprocesscreds process-based credential providers to be used with the AWS CLI and related tools. Includes examples for okta and adfs.
AWS Security Hub https://aws.amazon.com/security-hub/ gives you a comprehensive view of your high-priority security alerts and compliance status across AWS accounts.
AWS Control Tower https://aws.amazon.com/controltower/ automates the set-up of a baseline environment, or landing zone, that is a secure, well-architected multi-account AWS environment.
AWS Data-safe Cloud https://pages.awscloud.com/AWS-Data-safe-Cloud-S.html
AWS License Manager – Manage Software Licenses and Enforce Licensing Rules https://aws.amazon.com/blogs/aws/new-aws-license-manager-manage-software-licenses-and-enforce-licensing-rules/ You can define your licensing rules, taking in to account any enterprise agreements and other terms that govern your use of the licensed software.