亚马逊 AWS 用AWS 高级别管控 IT 资源.pdfVIP

Amazon Web Services – Security at Scale: Governance in AWS November 2013 Security at Scale: Governance in AWS Analysis of AWS features that can alleviate on-premise challenges November 2013 (Please consult /compliance for the latest version of this paper) Page 1 of 16 Amazon Web Services – Security at Scale: Governance in AWS November 2013 Table of Contents Abstract 3 Introduction 3 Manage IT resources 4 Manage IT assets 4 Control IT costs 5 Manage IT security 6 Control physical access to IT resources 6 Control logical access to IT resources 7 Secure IT resources 8 Manage logging around IT resources 10 Manage IT performance 11 Monitor and respond to events 11 Achieve resiliency 12 Service-Governance Feature Index 13 Conclusion 16 References and Further Reading 16 Page 2 of 16 Amazon Web Services – Security at Scale: Governance in AWS November 2013 Abstract You can run nearly anything on AWS that you would run on on-premise: websites, applications, databases, mobile apps, email campaigns, distributed data analysis, media storage, and private networks. The services AWS provides are designed to work together so that you can build complete solutions. An often overlooked benefit of migrating workloads to AWS is the ability to achieve a higher level of security, at scale, by utilizing the many governance-enabling features offered. For the same reasons that delivering infrastructure in the cloud has benefits over on-premise delivery, cloud- based governance offers a lower cost of entry, easier operations and improved agility by providing more oversight, security control, and central automa