AWS Security Blog

Tag: HAQM VPC

Introducing the New GDPR Center and “Navigating GDPR Compliance on AWS” Whitepaper

At AWS re:Invent 2017, the AWS Compliance team participated in excellent engagements with AWS customers about the General Data Protection Regulation (GDPR), including discussions that generated helpful input. Today, I am announcing resulting enhancements to our recently launched GDPR Center and the release of a new whitepaper, Navigating GDPR Compliance on AWS. The resources available […]

Now You Can Use AWS Shield Advanced to Help Protect Your HAQM EC2 Instances and Network Load Balancers

Starting today, AWS Shield Advanced can help protect your HAQM EC2 instances and Network Load Balancers against infrastructure-layer Distributed Denial of Service (DDoS) attacks. Enable AWS Shield Advanced on an AWS Elastic IP address and attach the address to an internet-facing EC2 instance or Network Load Balancer. AWS Shield Advanced automatically detects the type of AWS resource behind the […]

AWS Earns Department of Defense Impact Level 5 Provisional Authorization

The Defense Information Systems Agency (DISA) has granted the AWS GovCloud (US) Region an Impact Level 5 (IL5) Department of Defense (DoD) Cloud Computing Security Requirements Guide (CC SRG) Provisional Authorization (PA) for six core services. This means that AWS’s DoD customers and partners can now deploy workloads for Controlled Unclassified Information (CUI) exceeding IL4 […]

How to Visualize and Refine Your Network’s Security by Adding Security Group IDs to Your VPC Flow Logs

September 9, 2021: HAQM Elasticsearch Service has been renamed to HAQM OpenSearch Service. See details. August 31, 2020: The directions in this blog post for how to create an HAQM ES cluster have been updated. February 28, 2019: The features and services described in this post have changed since the post was published and the […]

How to Manage Secrets for HAQM EC2 Container Service–Based Applications by Using HAQM S3 and Docker

Docker enables you to package, ship, and run applications as containers. This approach provides a comprehensive abstraction layer that allows developers to “containerize” or “package” any application and have it run on any infrastructure. Docker containers are analogous to shipping containers in that they provide a standard and consistent way of shipping almost anything. One […]

How to Optimize and Visualize Your Security Groups

September 9, 2021: HAQM Elasticsearch Service has been renamed to HAQM OpenSearch Service. See details. May 3, 2017: We published a related blog post also written by Guy Denney, How to Visualize and Refine Your Network’s Security by Adding Security Group IDs to Your VPC Flow Logs. Many organizations start their journey with AWS by experimenting […]

How to Address the PCI DSS Requirements for Data Encryption in Transit Using HAQM VPC

The PCI requirements for encryption for data in transit are different for private networks than they are for public networks. When correctly designed, HAQM Virtual Private Cloud (HAQM VPC), a logically isolated portion of the AWS infrastructure that allows you to extend your existing data center network to the cloud, can be considered a private network, […]