One of the largest concerns enterprise customers have with moving to a shared infrastructure platform is security and the co-mingling of infrastructure components across customers (multi-tenancy). I recently came across two very good security whitepapers on the Amazon Web Services platform. The first is a Security Processes Overview (as of June, 2009) and the second is a document outlining considerations for deploying Health Insurance Portability and Accountability Act of 1996 (HIPAA) compliant applications on AWS.
Summary overview
Amazon Web Services: Overview of Security Processes:
- Certifications and Accreditations
- Secure Design Principles
- Physical Security
- Backups
- Network Security:
Amazon AWS
Amazon Elastic Compute Cloud (Amazon EC2) Security
Amazon Simple Storage Service (Amazon S3) Security
Amazon SimpleDB Security
Amazon Simple Queue Service (Amazon SQS) Security
Amazon CloudFront Security
Amazon Elastic MapReduce Security
Creating HIPAA-Compliant Medical Data Applications with Amazon Web Services:
- What is HIPAA and why is it important?
- Privacy and Security Rules
- Privacy Controls: Encrypting Data in the Cloud
- Security Controls: High-Level Data Protection
- AWS Security policies and controls
- Auditing, Backup, and Disaster Recovery
Posted by: |