Determining Security Requirements and Controls

Designing secure workloads is essential to protect your data and systems and to be able to respond to security threats in a timely and successful manner. When you design a new solution on Amazon Web Services (AWS), security is the first topic you want to focus on. Whether the application that you design is a public application or for internal use only, it is paramount to establish a trustworthy, secure foundation on AWS for your application to run in a safe environment.

In this chapter, you will learn how to control access to resources across multiple AWS accounts in your organization when building a new solution. You will look at applying security and compliance controls and go through the measures and the AWS services to leverage for the following topics:

• Managing identity and access
• Protecting your infrastructure
• Protecting your data
• Detecting incidents
• Responding to incidents