We ll start with the aws shared responsibility model which lies at the very foundation of aws security.
Aws security model diagram.
Amazon web services security pillar 1 introduction the aws well architected framework helps you understand trade offs for decisions you make while building workloads on aws.
I have introduced you to the aws iot security model and showed you how devices are authenticated against the service and how devices.
The diagram below shows how a new x 509 certificate is made for a device by aws iot.
Automatically create an interactive searchable diagram of your aws cloud infrastructure in minutes.
Set customizable rules and alerts.
The easiest option 1 below is to use the one click generation.
Overview of security processes page 3 software or utilities you install on the instances and the configuration of the aws provided firewall called a security group on each instance.
Security and compliance is a shared responsibility between aws and the customer.
Runs stand alone as an instance in your vpc never calls home.
Take requirements and processes that you have defined in operational excellence at an organizational and workload level and apply them to all areas.
The following diagram shows the components of the aws iot greengrass security model.
When creating a new certificate you have three choices.
Amazon web services amazon web services.
Simply choose to begin a new project or import your existing aws environment collaborate on your system architecture documentation with your whole team with a real time project budget automatically.
By the very nature of the phrase aws shared responsibility model we can see that security implementation on the aws cloud is not the sole responsibility of any one player but is shared between aws and you the customer.
Staying up to date with aws and industry recommendations and threat intelligence helps you evolve your threat model and control.
A greengrass service role a customer created iam role assumed by aws iot greengrass when accessing to your aws resources from aws iot core aws lambda and other aws services.
By using the framework you will learn current architectural best practices for designing and operating reliable secure efficient and cost effective workloads in the cloud.
These are basically the same security tasks that you re used to performing no matter where your servers are located.
This shared model can help relieve the customer s operational burden as aws operates manages and controls the components from the host operating system and virtualization layer down to the physical security of the facilities in which the service operates.
