Security
- The question it answers
- Are data, systems, and assets protected, and can we detect and respond to security events?
- Design principles
- Implement a strong identity foundation — least privilege, no long-lived credentials.
- Enable traceability — log and audit everything (AWS CloudTrail).
- Apply security at all layers, not just the perimeter (defense in depth).
- Automate security best practices.
- Protect data in transit and at rest.
- Keep people away from data — reduce direct human access.
- Prepare for security events — run incident response playbooks.
- Typical services
- Ties to
- The AWS shared responsibility model — this pillar is about your half.