From the course: AWS for DevOps: Security, Governance, and Validation

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Outcome-based security via audits

Outcome-based security via audits - Amazon Web Services (AWS) Tutorial

From the course: AWS for DevOps: Security, Governance, and Validation

Start my 1-month free trial

Outcome-based security via audits

“

- [Instructor] In addition to using SLAs, another approach is to use outcome-based validation via audits. Now, these could be security audits, compliance audits, and they could be done by internal or external auditors or a combination of both and Amazon provides some guidance on this. I'm going to go out and show you a couple of sites that can be helpful if you're taking these approaches. So, the first one is here in the Amazon documentation and it is AWS Security Audit Guidelines. And this is really designed for an internal audit performed by your own team. If you were to engage with AWS security experts, they would go beyond what is listed here based on their experience and your requirements. This is a baseline. So, this is a set of practices that I know I've used with customers and it's really helped to educate both the customers and me about security activities that we could be doing to ensure the security of the running applications. So, it's a baseline and I find it to be quite…

Contents