Designing DDoS/security resilient architecture
In this section, we will look into how DDoS/security attacks can impact the availability of your applications. We will discuss briefly what DDoS is and what the different types of security attacks are. We will explore some of the mitigation strategies for these attacks and implement them in a sample architecture.
An example of DDoS/security resilient architecture
The following is the AWS-recommended security resilient architecture diagram. It is built around three-tier web applications. Since our focus is on the security aspect of the architecture, we have simplified the web application components.
Figure 11.5 – Security reference architecture
The architecture uses AWS organizations to organize and manage your accounts. Accounts are grouped into Organization Units (OUs), based on their functionalities. We start with the account responsible for managing the organization. We call this the Org Mgmt...
