Best Practices for Security, Identity, & Compliance
Last updated: July 2021
Learn how to meet your security and compliance goals using AWS infrastructure and services. To learn current AWS recommendations and strategies to use when designing cloud architectures with security in mind, see the Security Pillar - AWS Well-Architected Framework. To browse AWS security documentation by category, see AWS Security Documentation.
Featured Content
Identity & Access Management
Detection
- Blog: AWS Foundational Security Best Practices Standard Now Available in Security Hub
- Workshop: Integration, Prioritization, and Response with AWS Security Hub
- Reference Implementation: AWS Security Hub Automated Response and Remediation
- Blog: How You Can Use Amazon GuardDuty to Detect Suspicious Activity Within Your AWS Account
Infrastructure Protection
- Whitepaper: AWS Best Practices for DDoS Resiliency
- Reference Implementation: AWS WAF Security Automations
- Technical Guide: Guidelines for Implementing AWS WAF
- Workshops: Infrastructure Security
- Technical Guide: AWS Security Reference Architecture
Data Protection
- Documentation: AWS Key Management Service Cryptographic Details
- Whitepaper: Data Classification - Secure Cloud Adoption
- Compliance Guide: Using AWS in the Context of Common Privacy and Data Protection Considerations
- Workshops: Data Protection
- Blog: Three Common Cloud Encryption Questions and Their Answers on AWS
Compliance
Incident Response
AWS re:Invent 2020: AWS security: Where we’ve been, where we’re going
AWS re:Invent 2020: Ten easy and effective ways to secure your AWS environment
AWS re:Invent 2020: Zero Trust: An AWS perspective
Most Popular
- Well-Architected: Security Pillar
- Reference Implementation: AWS Landing Zone
- Reference Implementation: AWS WAF Security Automations
Related Resources
Filter by:
Clear all filters
