Security in AWS Pricing Calculator | Data Protection & Compliance Validation

By
Martins Chima
-

Security in AWS Pricing Calculator – Data Protection & Compliance Validation. The highest priority is cloud protection at AWS. You benefit from a data centre and network architecture as an AWS client, which is designed to meet the needs of the most security-sensitive organisations.

Protection between AWS and you is a joint responsibility. This is defined as cloud protection and security in the cloud by the shared responsibility model:

Cloud security-AWS is responsible for securing the infrastructure in the AWS Cloud that runs AWS services. AWS also provides you with equipment that you can easily use. So, as part of the AWS Enforcement Programs, third-party auditors routinely evaluate and check the effectiveness of our protection.

See AWS Services in Reach by Compliance Program to learn about the compliance systems that relate to the AWS Pricing Calculator.

Cloud security: The AWS service you use decides your liability. You are also responsible for other factors, including the sensitivity of your data, the requirements of your business, and the laws and regulations that apply.

AWS Pricing Calculator is a public interface: It does not store the data you provide, and AWS does not collect your input or link your input with an AWS account.

Topics

  • Data protection in AWS Pricing Calculator
  • Compliance validation for AWS Pricing Calculator

Data protection in AWS Pricing Calculator

In the AWS Price Calculator, the AWS mutual liability model relates to data security. AWS is responsible for protecting the global infrastructure running all of the AWS Cloud, as defined in this model.

You are responsible for maintaining control of the content on this infrastructure that is hosted. The security configuration and management tasks for the AWS services you use are included in this content. For more detail on data privacy however, see the Data Privacy FAQ. See the AWS Shared Responsibility Model and GDPR blog post on the AWS Security blog for information on data protection in Europe.

We suggest that you secure AWS account credentials for data security purposes and set up individual user accounts with AWS Identity and Access Management (IAM). That way, only the permits needed to perform their work duties are issued to each user.

Protecting your AWS Calculator Information

We also suggest that you protect your information in the following ways:

  • First of all, use multi-factor authentication (MFA) with each account.
  • Secondly, use SSL/TLS to communicate with AWS resources. We recommend TLS 1.2 or later.
  • Thirdly, set up API and user activity logging with AWS CloudTrail.
  • Fourthly, use AWS encryption solutions, along with all default security controls within AWS services.
  • Using specialised security services such as Amazon Macie, which helps to locate and protect personal data stored in Amazon S3.
  • When accessing AWS through a command line interface or an API, if you need FIPS 140-2 validated cryptographic modules, use a FIPS endpoint. See Federal Information Processing Standard (FIPS) 140-2 for more information about the available FIPS endpoints.

We highly suggest that you never place sensitive identifying details in free-form fields such as a name field, such as the account numbers of your customers. This involves using the console, API, AWS CLI, as well as AWS SDKs while operating with the AWS Pricing Calculator or other AWS services.

For inclusion in diagnostic logs, any data that you enter into the AWS Pricing Calculator or other services may be collected. If you provide an external server with a URL, do not provide credential information in the URL to validate the server’s request.

Compliance validation for AWS Pricing Calculator

As part of various AWS enforcement initiatives, third-party auditors review the security and compliance of the AWS Pricing Calculator. Any AWS compliance systems are not subject to the AWS Pricing Calculator.

See the AWS Services Coverage by Compliance Program for a list of AWS services within the scope of particular compliance programmes. You can also See AWS Enforcement Services for general details.

When using the AWS Pricing Calculator, your compliance liability is determined by the sensitivity of your data, the compliance goals of your company, and relevant laws and regulations.

Enforcement by AWS Reseources

To assist with enforcement, AWS offers the following resources:

  • Security and Compliance Quick Start Guides – These deployment guides address architectural issues and include steps for the deployment of AWS baseline environments based on security and compliance.
  • AWS Compliance Resources – This collection of workbooks and guides might apply to your industry and location.
  • Security and Compliance Quick Start Guides – These deployment guides address architectural issues and include steps for the deployment of AWS baseline environments based on security and compliance.
  • AWS Compliance Resources – This collection of workbooks and guides might apply to your industry and location.

In conclusion, we gave you information on Security in AWS Pricing Calculator | Data Protection & Compliance Validation.

Goto Page 2 – Continue Reading

RELATED ARTICLES

2024 - All Rights Reserved
Exit mobile version