AWS security architecture case study

The plan starts from an evaluation of the current environment and a vulnerability and risk assessment, then sets out the target architecture, how to test and migrate to it, and how to run it afterwards.

What it covers

• Evaluation of the current cloud architecture, access control and security controls
• Cloud and service models, security and sovereignty, and designs for high demand and infrastructure failure
• Access control, data storage and encryption, classification, network segmentation, and privilege, authentication and authorisation
• Testing environments, QA, disaster recovery, blue-green deployment and the migration strategy
• Log scrubbing, remote log monitoring, maintenance and lifecycle management
• A cloud incident response plan with disaster recovery and reporting

A 36-page planning case study. The architecture is proposed rather than presented as a live production system, and AWS services and guidance change often.