Contents
Introduction .......................................................................................................................... 1
Shared Security Responsibility Model ................................................................................ 1
AWS Security Responsibilities ......................................................................................... 2
Customer Security Responsibilities ................................................................................. 2
AWS Global Infrastructure Security .................................................................................... 3
AWS Compliance Program .............................................................................................. 3
Physical and Environmental Security .............................................................................. 4
Business Continuity Management ................................................................................... 6
Network Security .............................................................................................................. 7
AWS Access ................................................................................................................... 11
Secure Design Principles ............................................................................................... 12
Change Management..................................................................................................... 12
AWS Account Security Features ................................................................................... 14
Individual User Accounts ............................................................................................... 19
Secure HTTPS Access Points ....................................................................................... 19
Security Logs .................................................................................................................. 20
AWS Trusted Advisor Security Checks ......................................................................... 20
AWS Config Security Checks ........................................................................................ 21
AWS Service-Specific Security ......................................................................................... 21
Compute Services .......................................................................................................... 21
Networking Services ...................................................................................................... 28
Storage Services ............................................................................................................ 43
Database Services ......................................................................................................... 55
Application Services ....................................................................................................... 66
Analytics Services .......................................................................................................... 73
Deployment and Management Services ....................................................................... 77
