Security | Trilogix Cloud

1. Security Standards and Benchmarking

Atlas – Compliance Centre
Centre for Internet Security CIS Benchmarks: 100+ configuration guidelines for various technology groups to safeguard systems against cyber threats.
SCAP Security Guide
A SOC 1 Report (System and Organization Controls Report) is a report on Controls at a Service Organization which are relevant to user entities’ internal control over financial reporting.

2. Secure Account Management

AWS Tasks That Require AWS Account Root User Credentials
AWS Services That Work with IAM AWS services grouped by their AWS product categories and include information about what IAM features they support.
How IAM evaluates policies
Policy Summaries Make Understanding IAM Policies Easier.
Configuring MFA-Protected API Access provides the additional security of requiring users to be authenticated with AWS multi-factor authentication (MFA) before you allow them to perform particularly sensitive actions.
AWS Process Credential Providers process-based credential providers to be used with the AWS CLI and related tools. Includes examples for okta and adfs.
AWS Security Hub gives you a comprehensive view of your high-priority security alerts and compliance status across AWS accounts.
AWS Control Tower automates the set-up of a baseline environment, or landing zone, that is a secure, well-architected multi-account AWS environment.
AWS Data-safe Cloud
AWS License Manager – Manage Software Licenses and Enforce Licensing Rules You can define your licensing rules, taking in to account any enterprise agreements and other terms that govern your use of the licensed software.

3. Encryption and Security Keys

AWS Key Management Service Cryptographic Details white paper.
Signing AWS Requests with Signature Version 4 how to create a signature and add it to an HTTP request to AWS.
TLS 1.3: better for individuals – harder for enterprises – blog post from the National Cyber Security Centre.
How to quickly launch encrypted EBS-backed EC2 instances from unencrypted AMIs
Sharing an AMI with Specific AWS Accounts

4. Firewalls and packet inspection

Gateway Load Balancer one gateway for distributing traffic across multiple virtual appliances
Deployment models for AWS Network Firewall

5. Security Monitoring, Logging and Auditing

6.Cross-Region Replication and Failover

7.Web Application Security

8. Data Security

Security features of Amazon DocumentDB https://docs.aws.amazon.com/documentdb/latest/developerguide/security.html
AWS Resource Access Manager https://docs.aws.amazon.com/ram/latest/userguide/what-is.html(AWS RAM) enables you to share your resources with any AWS account or through AWS Organizations.

9. Hybrid Environment Security

10. Serverless Security