Perspective of AWS CAFD Security Perspective Capabilities;<\/p>\n\n\n\n
1. Security Governance<\/strong><\/p>\n\n\n\n Develop and communicate security roles, responsibilities, policies, processes and procedures<\/p>\n\n\n\n Perform risk assessment on your organization. It can assist in determining the likelihood and impact of identified risk and vulnerabilities.<\/p>\n\n\n\n 2. Security Assurance<\/strong><\/p>\n\n\n\n Continuously monitor, evaluate, manage and improve the effectiveness of your security and privacy programs;<\/p>\n\n\n\n Establish demonstratable security and privacy controls.<\/p>\n\n\n\n Compliance certifications or attestations of the cloud vendor. (#awsartifacts<\/strong>)<\/p>\n\n\n\n 3. Identity and Assess Management<\/strong><\/p>\n\n\n\n Manage identities and permissions at acale.<\/p>\n\n\n\n -Rely on a centralized identity provider;<\/p>\n\n\n\n -Leverage user groups and attributes for fine-grained access at scale and temporary credentials<\/p>\n\n\n\n -use strong sign-in mechanism (enable Multi factor authentication<\/p>\n\n\n\n -Don’t use root user access unless necessary<\/p>\n\n\n\n -Principle of least privilege, set permissions boundaries (ABAC policies)<\/p>\n\n\n\n 4. Threat Detection<\/strong><\/p>\n\n\n\n Understand and identify potential security misconfigurations, threats or unexpected behaviors’.<\/p>\n\n\n\n – Leverage deception technology (#honeypots<\/strong>) to gain understanding of unauthorized user behaviors patterns<\/p>\n\n\n\n -Mine relevant data sources, process and analyze data<\/p>\n\n\n\n 5. Vulnerability Management<\/strong><\/p>\n\n\n\n Continuously identify, classify, remediate and mitigate security vulnerabilities<\/p>\n\n\n\n -use red teaming and penetration testing to identify vulnerabilities in your system architecture<\/p>\n\n\n\n 6. Infrastructure protection<\/strong><\/p>\n\n\n\n Validate that systems and services within your workloads are protected against unintended and unauthorized access and potential vulnerabilities.<\/p>\n\n\n\n -Use defense in depth to layer a series of defensive mechanisms<\/p>\n\n\n\n – Apply Zero trust to your systems and data in accordance with their value<\/p>\n\n\n\n -Use Virtual private cloud (VPC) endpoints for private connection to cloud resources.<\/p>\n\n\n\n 7. Data Protection<\/strong><\/p>\n\n\n\n Maintain visibility and control over data, and how it is accessed and used.<\/p>\n\n\n\n – classify your data based on criticality and sensitivity<\/p>\n\n\n\n – Data life cycle management<\/p>\n\n\n\n – Encrypt all data at rest and in transit (Data in S3 storage are automatically encrypt)<\/p>\n\n\n\n 8. Application security<\/strong><\/p>\n\n\n\n Detect and address security vulnerabilities during the software development process.<\/p>\n\n\n\n – Minimize human intervention by automating security related tasks<\/p>\n\n\n\n -use static code analysis tolls to identify common security issues.<\/p>\n\n\n\n 9. Incident response<\/strong><\/p>\n\n\n\n Reduce potential harm by consistently responding to security incidents quickly and effectively<\/p>\n\n\n\n – Use runbooks and create a library of incident response mechanisms<\/p>\n\n\n\n -simulate security events and practice your incident response through table-top exercises and game days.<\/p>\n\n\n\n -conduct post-incident analysis to learn from security incidents<\/p>\n","protected":false},"excerpt":{"rendered":" Perspective of AWS CAFD Security Perspective Capabilities; 1. Security Governance Develop and communicate security roles, responsibilities, policies, processes and procedures Perform risk assessment on your organization. It can assist in…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-4854","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t