Identity and Access Management – Securing Users, Roles, and Policies

Inline policies – Identity and Access Management – Securing Users, Roles, and Policies

9 August, 2024 Kennedy Kincaid 0 Comments 6 categories

Inline policies Apart from managed policies, AWS also offers inline policies. An inline policy is a policy that is directly embedded in a single user, group, or role. They are not standalone like managed policies…

Data protection in key AWS services – Data Protection – Encryption, Key Management, and Data Storage Best Practices

9 July, 2024 Kennedy Kincaid 0 Comments 3 categories

Data protection in key AWS services In this section, we will delve into the various mechanisms and strategies for data protection across key AWS services, showing how encryption and key management are just pieces of…

Encryption – Data Protection – Encryption, Key Management, and Data Storage Best Practices

5 June, 2024 Kennedy Kincaid 0 Comments 3 categories

Encryption S3 offers two primary types of encryption: SSE and CSE. They can both support BYOKs and AWS-managed keys. SSE SSE is the most straightforward of the two, where data is encrypted at rest within…

Comparison – Data Protection – Encryption, Key Management, and Data Storage Best Practices

15 May, 2024 Kennedy Kincaid 0 Comments 3 categories

Comparison The following table (Table 4.2) summarizes the different encryption options available in S3: OptionTypeKey ManagementControl LevelUse CaseSSE-S3Server-sideAWS-managed (aws/s3)LowSimplest setup; no key management controlSSE-KMSServer-sideKMS CMKMediumGranular control, audit trails, and integration with KMS-aware servicesDSSE-KMSServer-sideKMS CMKMediumCompliance with…

Snapshots – Data Protection – Encryption, Key Management, and Data Storage Best Practices

9 April, 2024 Kennedy Kincaid 0 Comments 3 categories

Snapshots EBS snapshots provide point-in-time backups of your volumes and are stored in S3, inheriting its durability features. They play a crucial role in data recovery, allowing you to restore your volume to a previous…

EFS filesystems – Data Protection – Encryption, Key Management, and Data Storage Best Practices

9 March, 2024 Kennedy Kincaid 0 Comments 4 categories

EFS filesystems Amazon EFS is a scalable file storage solution for use with both AWS services and on-premises resources. Given its shared nature and the potential for multiple resources to access it simultaneously, ensuring data…

RDS databases – Data Protection – Encryption, Key Management, and Data Storage Best Practices

9 February, 2024 Kennedy Kincaid 0 Comments 4 categories

RDS databases RDS provides robust tools for safeguarding your database, including comprehensive backup options and powerful encryption mechanisms. Let’s explore these features to ensure the security and resilience of your data. Backup Backups are crucial…

DynamoDB tables – Data Protection – Encryption, Key Management, and Data Storage Best Practices

25 January, 2024 Kennedy Kincaid 0 Comments 4 categories

DynamoDB tables Amazon DynamoDB provides a robust foundation, yet data resiliency and security are your responsibility. Let’s delve into the backup and encryption features that are essential for safeguarding your valuable DynamoDB assets. Backup Data…

Creating and managing IAM policies – Identity and Access Management – Securing Users, Roles, and Policies

9 December, 2023 Kennedy Kincaid 0 Comments 4 categories

Creating and managing IAM policies Crafting and managing IAM policies is an art that requires precision, understanding, and continuous monitoring. As AWS environments evolve, so do the requirements for permissions. In this subsection, we will…

Advanced IAM policy conditions – Identity and Access Management – Securing Users, Roles, and Policies

9 November, 2023 Kennedy Kincaid 0 Comments 4 categories

Advanced IAM policy conditions Conditions provide the granular control that many organizations need. They allow you to specify the circumstances under which the policy statement is in effect. These conditions can be: Global conditions: Apply…

Blog Post