Security Resources

For the latest AWS Security news and updates visit the AWS Security Blog.

Leading insight and applications from AWS security experts on achieving provable security, the highest level of security assurance, in the cloud.

Whitepapers

AWS & Cybersecurity in the Financial Services Sector (July 2019)

AWS Best Practices for DDoS Resiliency (June 2018)

AWS Cloud Adoption Framework: Security Perspective (June 2016)

AWS Security Best Practices (August 2016)

AWS Security Checklist

AWS Well-Architected Framework: Security Pillar (July 2018)

Introduction to AWS Security (July 2015)

Introduction to AWS Security Processes (June 2016)

Overview of AWS Security - Analytics, Mobile and Application Services (June 2016)

Overview of AWS Security - Application Services (June 2016)

Overview of AWS Security - Compute Services (June 2016)

Overview of AWS Security - Database Services (June 2016)

Overview of AWS Security - Network Services (August 2016)

Overview of AWS Security - Storage Services (June 2016)

Secure Content Delivery with CloudFront (November 2016)

Securing Data at Rest with Encryption (November 2014)

Securing Internet of Things (IoT) with AWS (April 2019)

Security at Scale: Governance in AWS (October 2015)

Security at Scale: Logging in AWS (October 2015)

ARG: How AWS Service Teams use Automated Reasoning for Security
AWS Config Update – New Managed Rules to Secure S3 Buckets
AWS re:Invent 2016: Automated Formal Reasoning About AWS Systems (SEC401)
Example Scenarios for AWS Config Continuous Monitoring of Amazon S3 Bucket Access Controls
New Amazon S3 Encryption & Security Features
Part one: Verifying s2n HMAC with SAW
Part two: Specifying HMAC in Cryptol
Part three: Proving Program Equivalence with SAW