AWS Security Reference Architecture: Visualize your security
summary
AWS SRA provides prescriptive multi-account patterns plus a deployable code library that uses CloudFormation only (no Terraform support) to spin up a Security OU with audit and log-archive accounts, an Infrastructure OU (network + shared services) and a Workloads OU for application accounts. The easy-setup uses a CloudFormation easy setup: CodeBuild + Lambda + S3 staging bucket to clone the repo and deploy a common solution, then enable Config, CloudTrail, Security Hub, GuardDuty, Detective, Inspector, Systems Manager and KMS; the demo completes with nested stacks in CreateComplete and Security Hub enabled (member account score 88%).
AI-written summary · about
chapters (13)
- 0:00AWS Security Reference Architecture intro
- 1:52What is AWS SRA
- 3:595 ways AWS SRA helps
- 8:57Security foundations & account structure
- 12:05Security OU & accounts breakdown
- 21:12Defense in depth layers
- 29:18Identity and access management capabilities
- 31:46Detective controls & incident response
- 34:54Infrastructure protection & vulnerability management
- 38:24Data protection & encryption
- 41:14AWS SRA code repo
- 46:11Demo: Deploy AWS SRA step by step
- 57:53Key takeaways & next steps
related talks
55mPlan and deploy your own security architecture based on the AWS SRA
40mCreating a managed, governed, and secure SaaS foundation on
51mAWS Security Essentials
23mSecurity Best Practices: The Well-Architected Framework
27mIntroduction to AWS Security
12mCloud Security from Scratch
01h 02mEvolving your security capabilities through key growth stages (STP306-R)
52mManaging security with a unified strategy, featuring Nubank