Aws Shared Security Model
The shared responsibility model.
Aws shared security model. This allows aws to support the customer by taking on the burden of operations control associated with the physical infrastructure so the customer can focus on securing and producing within the context of software. The aws shared responsibility model dictates which security controls are aws s responsibility and which are yours. However there are certain security features such as individual user accounts and credentials ssl tls for data transmissions and user activity logging. By the very nature of the phrase aws shared responsibility model we can see that security implementation on the aws cloud is not the sole responsibility of any one player but is shared between aws and you the customer.
When you decide to move your it infrastructure to aws services it immediately creates a model of shared responsibility between your company as customer and aws. While aws manages the security of the cloud security in the cloud is the responsibility of the customer. Cloud security at aws is the highest priority. This includes regional available and edge zones of amazon s cloud infrastructure.
In aws s shared responsibility model is the concept that aws and the customer share responsibilities for security and compliance of amazon web services. Aws shared security responsibility model. The amount of security configuration work you have to do varies depending on which services you select and how sensitive your data is. As an aws customer you benefit from a data center and network architecture that is built to meet the requirements of the most security sensitive organizations.
This shared model can help relieve the customer s operational burden as aws operates manages and controls the components from the host operating system and virtualization layer down to the physical security of the facilities in which the service operates. The aws shared responsibility model is designed to increase the total security level of amazon s cloud infrastructure. Security is a shared responsibility between aws and you. In general aws considers itself responsible for the security of the cloud as a whole while customers should maintain responsibility for the security of their specific instances.