AWS Well-Architected Framework
Architecture & DesignThe AWS Well-Architected Framework provides architectural best practices organized into six pillars:
- Operational Excellence: run and monitor systems
- Security: protect data, systems, and assets
- Reliability: recover from failures, meet demand
- Performance Efficiency: use resources efficiently
- Cost Optimization: avoid unnecessary costs
- Sustainability: minimize environmental impact
Security Pillar - Seven Key Areas
- Security foundations (shared responsibility, governance)
- Identity and access management
- Detection (logging and monitoring)
- Infrastructure protection (network and compute)
- Data protection (encryption and classification)
- Incident response
- Application security (secure development, code reviews, vulnerability management)
Related Terms
A security strategy using multiple layers of controls (network, identity, data, application) so that if one layer fails, others still protect the environment.
The framework defining that AWS is responsible for security of the cloud (infrastructure), while customers are responsible for security in the cloud (data, access, configuration).
Meeting regulatory requirements and industry standards (SOC 2, HIPAA, GDPR, PCI DSS, CIS) for data protection, access control, and security practices in the cloud.
Toc Consulting: AWS Security & Cloud Architecture
Securing your AWS estate?
Our team helps engineering teams secure and architect AWS the right way: assessment in week one, a prioritized action plan in week two.