Securing the AWS Cloud

Security practices in Amazon Web Services

Securing the
AWS Cloud
Steve Riley
steriley@amazon.com
@steveriley   @awscloud
http://stvrly.wordpress.com
Amazon S3
Amazon SDB
++
++
Amazon EBS
++
Amazon EC2
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/
Read
Write
Full
SOX
ongoing
current deployments
how-to whitepaper
Physical security
Access controls
Change management
Operations
In progress
HIPAA
SAS 70 type II
http://aws.amazon.com/security/
Currently
EC2 on-demand and reserved
EBS
CloudWatch
Linux/Unix and Windows
Upcoming
Outbound Internet
Elastic IPs
Elastic Load Balancing
Autoscaling
DevPay
>1 AZ, >1 router
Inter-subnet security groups