Domain 130% of scored content
Design Secure Architectures
Identity and access across accounts, secure network and application design, and the controls that protect data at rest, in transit, and in backups.
3 topics
About 13 minutes of reading
- 1.1Secure access to AWS resourcesGive every person and workload the smallest set of permissions it needs, prefer temporary credentials over long-term keys, and use account boundaries plus organization-wide guardrails to contain mistakes.4 min read
- 1.2Secure workloads and applicationsLayer your defenses: segment the VPC into public and private subnets, filter traffic with security groups and network ACLs, keep service traffic private with endpoints, protect the edge with AWS WAF and AWS Shield, and keep secrets out of code.5 min read
- 1.3Data security controlsClassify data, encrypt it at rest and in transit with keys you control at the right level, decide who can use those keys, and keep recoverable, tamper-resistant copies for as long as the rules require.4 min read