Key Points:
AWS Security Overview:
AWS prioritizes security as fundamental, providing robust infrastructure and services.
Trusted by international organizations, including the U.S. Department of Defense, GE, and pharmaceutical companies like AstraZeneca.
Shared Responsibility Model:
AWS follows the Share Responsibility Model, where AWS manages security of the cloud infrastructure, while customers are responsible for security in the cloud.
Responsibilities vary depending on the service used, with AWS handling foundational security.
Security Services:
IAM (Identity and Access Management) for controlling user access and permissions.
Detection and monitoring tools like CloudTrail, CloudWatch, GuardDuty, and Inspector for threat detection and prevention.
Data protection through encryption using services like KMS (Key Management Service) and ACM (Certificate Manager).
Infrastructure Protection:
DDoS protection with Shield Standard and advanced features with Shield Advanced.
Network controls using Security Groups and NACLs (Network Access Control Lists).
WAF (Web Application Firewall) for protecting against Layer 7 attacks.
Additional Security Services:
Trusted Advisor for cost-effectiveness, performance, and security recommendations.
AWS Detective for in-depth investigation of security events.
Compliance reports for various standards (SOC, PCI DSS, ISO, GDPR) to ensure regulatory adherence.
AWS Contributions to Community:
AWS provides a secure and reliable cloud computing environment, contributing to the overall cybersecurity landscape.
Shared best practices and security models that empower organizations to enhance their security posture.
Continuous innovation and updates in security services to address evolving threats, benefiting the broader community.
Presentation on Internet Security by @SteveMushero of @ChinaNetCloud, given in Shanghai in May, 2015.
Covers threats, risks, and solutions.
Bi-lingual English & Chinese.
