Security is also a management of access and identities. IAM: User, Group, Role AWS IAM is a core tool of the customer for managing authentication and authorization the cloud environment. Authentication tells, who is entering the account. We can authenticate, if the actor is, who he says he is by using credentials, like passwords, one […]

AMAZON Inspector, to identify security findings. Amazon Inspector assesses applications for vulnerabilities and creates a detailed list of security findings. Using the AWS Management Console is an easy way to activate and schedule the inspection review interval for each component like the 3 Lamda applications above via AWS Inspector. [Left architecture] The example on the […]

Security, a shared responsibility between Public Service Provider and the Business Customer. Shared responsibilities Security responsibility of the cloud infrastructure include: o Design for security (physical structure and the software layer regulatory compliance & security)o Constantly monitored (monitoring of security incident or compromise)o Highly automated (responses are highly automated)o Highly availableo Highly accredited (consequences: physical […]

Protect from Distributed Denial of Services (DDoS) AWS Shield, AWS Shield Advanced AWS Shield ensures to protect from Distributed Denial of Services (DDoS). DDoS mitigation challenges typically are: Deal with complexity, limited bandwidth, involves re-architecting (often on premises), manual, degraded performance, time-consuming, expensive. AWS Shield is a managed DDoS protection service. It’s always-on detection and […]