AWS compliance and governance

AWS Security and Cost Management Concepts

Dev Bhosale

Principal Data & Cloud Architect

Cloud governance

Regulations around the world

• Large companies are required to comply with regulations around the world
• Sarbanes-Oxley for accounting applies to all public companies in the US
• GDPR for consumer data protection applies to large companies in Europe

Governance functions

• Identify critical resources and governance model
• Detect anomalies & malicious activities
• Protect data and assets
• Respond through incident response planning
• Recover to the prior condition (for data loss/attack)

AWS tools for governance

Threat identification

• Continuously checks your AWS resources for security best practices
• Find misconfigurations and gathers security alerts

Tools for protection

Detect malicious activities

• Detect anomalies and malicious activities with continuous monitoring from CloudWatch

Detect malicious activities

Respond and recover

Respond and recover

Let's practice!

AWS Security and Cost Management Concepts