Best Practices for Security, Identity, & Compliance

Security Best Practices in IAM

We explain best practices for AWS Identity and Access Management you can use to help secure your AWS resources.

IAM Policy Power Hour

We explore common use cases covering IAM policy types, and show you how to set, verify, and refine access.

Connecting Workforce Identity for Gen AI and Analytics

Learn how AWS and NVIDIA revolutionized workforce access to generative AI applications and analytics tools.

Introduction to AWS Identity and Access Management

We introduce IAM including how IAM can be used for authentication and authorization to AWS services.

Identity Workshops

Find hands-on identity workshops taught by AWS experts that teach you practical skills, techniques, and concepts.
Digital Sovereignty at AWS

We introduce our commitment to offering the most advanced set of sovereignty controls and features available in the cloud.

Choosing an AWS Cryptography Service

Learn about our different cryptographic tools and services and how to decide which you should use for your projects.

Introduction to the Cryptographic Details of AWS KMS

We provide a detailed description of the cryptographic operations of AWS KMS to help you evaluate the service.

Establishing a Data Perimeter on AWS

We show you how to establish your data perimeter at scale, including key security and implementation considerations.

Data Privacy Center

We explain how we meet our customers’ privacy needs by being transparent in our privacy commitments.
AWS Best Practices for DDoS Resiliency

We provide you with prescriptive DDoS guidance to improve the resiliency of applications running on AWS.

Security Automations for AWS WAF

We show you how to get started and set up monitoring for the Security Automations for AWS WAF solution.

AWS Security Best Practices: Network Infrastructure

Learn how to understand and implement AWS security best practices with a deep dive into securing network infrastructure.

Automated Patching for Mutable Instances in the Hybrid Cloud

We describe an automated patching solution for mutable and on-premises instances that uses AWS Systems Manager.

AWS Security Reference Architecture (AWS SRA)

We explain the AWS SRA, a holistic set of guidelines for deploying AWS security services in a multi-account environment.
AWS Privacy Reference Architecture (AWS PRA)

We explain the AWS PRA, a set of design and configuration guidelines for privacy-supporting controls in AWS.

The Total Economic Impact™ of AWS Cloud Operations

Learn how you can optimize IT to improve management, security, and operations with AWS Cloud Operations.

Risk and Compliance

We outline the mechanisms that AWS has implemented to manage risk and the tools that you can leverage.

Navigating GDPR Compliance on AWS

Learn how to analyze, investigate, and quickly identify the root cause of potential security issues.

How to Maintain and Automate Compliance on AWS

Learn how AWS services can help simplify and automate compliance with various regulations and standards.
AWS Foundational Security Best Practices Standard

We introduce a set of controls that detect when your AWS accounts and resources deviate from security best practices.

Threat Detection & Response Workshop

Get familiar with AWS threat detection and response services, best practices, key use cases, and deep-dive scenarios.

Automated Security Response on AWS

Deploy an add-on that works with AWS Security Hub and provides predefined response and remediation actions.

Security Insights on AWS

Deploy an automated dashboard based on data stored in Amazon Security Lake, a data lake that aggregates security data.

Innovations in AWS Detection and Response

Gain a deeper understanding of how you can seamlessly integrate AWS detection and response services.
Methodology for Incident Response on Generative AI Workloads

Learn a methodology that you can use to investigate security incidents involving generative AI-based applications.

AWS Security Incident Response Guide

We present an overview of the fundamentals of responding to security incidents within your AWS Cloud environment.

AWS Security Incident Response Overview

Learn through interactive use cases that guide you through investigating common types of security incidents.

Basics of Amazon Detective

Learn how to analyze, investigate, and quickly identify the root cause of potential security issues.

AWS Incident Response Playbooks Workshop

Learn how to develop incident response playbooks for AWS, including detection & analysis, containment, and more.

Cybersecurity Awareness Training

Help employees in your organization learn how to identify cybersecurity risks, including phishing, social engineering, and data privacy with this free, 15-minute training from Amazon. The training is offered in 11 languages, is compliant with the Web Content Accessibility Guidelines (WCAG) 2.1 AA, and includes completion certificates for compliance tracking. Deploy immediately from our website or implement our pre-packaged files in your organization’s LMS.

Learn more »

Slide with the title "Generative AI for security in the real world," presented by Brad Dispensa and Matt Saner from AWS. A vibrant, curved gradient design is at the bottom.

AWS re:Invent 2024: Generative AI for security in the real world (56:17)

Slide with the title "Building a resilient and effective culture of security," presented by Kristen Haught, Brigid Johnson, and Bill Shinn from AWS. A curved gradient design is at the bottom.

AWS re:Invent 2024: Building a resilient and effective culture of security (1:02:34)

Slide with the title "How to maintain and automate compliance on AWS," presented by Laura Verghote and Cristina Rios Iribarren from AWS. A vibrant, curved gradient design is at the bottom.

AWS re:Invent 2024: How to maintain and automate compliance on AWS (36:32)

Filter by:

Clear all filters

1-6 (341)

No results found.
Please select different criteria, check your spelling, or try different keywords.

Pattern

New

Manage AWS Organizations policies as code

Manage service and resource control policies through a CI/CD pipeline that uses generative AI to create a summary of the changes.
HTML | PDF
Tags: DevOps | Infrastructure | Machine Learning | Security

May 21, 2025
AWS Solution

Updated

Landing Zone Accelerator on AWS

Deploy the Landing Zone Accelerator on AWS solution to quickly deploy a secure, resilient, scalable, and fully automated cloud foundation.

May 2025
Guide

Updated

Securing sensitive data by using Secrets Manager and Terraform

Best practices for using Terraform to rotate secrets, manage access to sensitive data, and store secrets in AWS Secrets Manager.
HTML | PDF
Tags: Security

May 20, 2025
Guide

New

Replatforming mainframe applications using a shared IBM Db2 database

A methodical, phased approach for replatforming COBOL applications by using existing IBM Db2 for z/OS tables as a bridge between legacy mainframe and modern cloud systems. This method minimizes data replication and avoids the risks associated with large-scale, abrupt transitions.
HTML | PDF
Tags: High Performance Computing | Mainframes | Migration | Operating Systems

May 07, 2025
Decision Guide

Choosing an AWS identity service

Help determine which AWS identity service is the best fit for your organization.

HTML | PDF

Security, Identity, & Compliance

Apr-25
Guide

Updated

Defining Amazon S3 bucket and path names for data lake layers

Create a consistent naming standard for Amazon S3 buckets and paths in data lakes hosted on the AWS Cloud.
HTML | PDF
Tags: Analytics | Storage & Backup

April 22, 2025

1 …

2 3 4 5 6

… 57

Security, Identity, & Compliance Blog Posts

No blog posts found that match the selected criteria.

How to secure your instances with multi-factor authentication

by Sangavi P, 05/22/2025
Integrate Amazon Bedrock Agents with Slack

by Salman Ahmed, Ankush Goyal, Sergio Barraza and Ravi Kumar, 05/21/2025
University of British Columbia Cloud Innovation Centre: Prototyping generative AI solutions using AWS

by Christian Castro and Scott McMillan, 05/21/2025
Stel Life’s Integrated Connected Care Empowers Healthcare Providers

by Gokhul Srinivasan, Juli Hysenbelli and Sid Kandan, 05/21/2025
Secure distributed logging in scalable multi-account deployments using Amazon Bedrock and LangChain

by Mohammad Tahsin, Felipe Lopez and Aswin Vasudevan, 05/21/2025
Shiny Shoe launches Monster Train 2 on AWS

by Caleb Cecil and Caleb Hannon, 05/21/2025

More…

Was this page helpful?

Feedback

Select your cookie preferences

Best Practices for Security, Identity, & Compliance

Security Best Practices in IAM

We explain best practices for AWS Identity and Access Management you can use to help secure your AWS resources.

IAM Policy Power Hour

We explore common use cases covering IAM policy types, and show you how to set, verify, and refine access.

Connecting Workforce Identity for Gen AI and Analytics

Learn how AWS and NVIDIA revolutionized workforce access to generative AI applications and analytics tools.

Introduction to AWS Identity and Access Management

We introduce IAM including how IAM can be used for authentication and authorization to AWS services.

Identity Workshops

Find hands-on identity workshops taught by AWS experts that teach you practical skills, techniques, and concepts.

Digital Sovereignty at AWS

We introduce our commitment to offering the most advanced set of sovereignty controls and features available in the cloud.

Choosing an AWS Cryptography Service

Learn about our different cryptographic tools and services and how to decide which you should use for your projects.

Introduction to the Cryptographic Details of AWS KMS

We provide a detailed description of the cryptographic operations of AWS KMS to help you evaluate the service.

Establishing a Data Perimeter on AWS

We show you how to establish your data perimeter at scale, including key security and implementation considerations.

Data Privacy Center

We explain how we meet our customers’ privacy needs by being transparent in our privacy commitments.

AWS Best Practices for DDoS Resiliency

We provide you with prescriptive DDoS guidance to improve the resiliency of applications running on AWS.

Security Automations for AWS WAF

We show you how to get started and set up monitoring for the Security Automations for AWS WAF solution.

AWS Security Best Practices: Network Infrastructure

Learn how to understand and implement AWS security best practices with a deep dive into securing network infrastructure.

Automated Patching for Mutable Instances in the Hybrid Cloud

We describe an automated patching solution for mutable and on-premises instances that uses AWS Systems Manager.

AWS Security Reference Architecture (AWS SRA)

We explain the AWS SRA, a holistic set of guidelines for deploying AWS security services in a multi-account environment.

AWS Privacy Reference Architecture (AWS PRA)

We explain the AWS PRA, a set of design and configuration guidelines for privacy-supporting controls in AWS.

The Total Economic Impact™ of AWS Cloud Operations

Learn how you can optimize IT to improve management, security, and operations with AWS Cloud Operations.

Risk and Compliance

We outline the mechanisms that AWS has implemented to manage risk and the tools that you can leverage.

Navigating GDPR Compliance on AWS

Learn how to analyze, investigate, and quickly identify the root cause of potential security issues.

How to Maintain and Automate Compliance on AWS

Learn how AWS services can help simplify and automate compliance with various regulations and standards.

AWS Foundational Security Best Practices Standard

We introduce a set of controls that detect when your AWS accounts and resources deviate from security best practices.

Threat Detection & Response Workshop

Get familiar with AWS threat detection and response services, best practices, key use cases, and deep-dive scenarios.

Automated Security Response on AWS

Deploy an add-on that works with AWS Security Hub and provides predefined response and remediation actions.

Security Insights on AWS

Deploy an automated dashboard based on data stored in Amazon Security Lake, a data lake that aggregates security data.

Innovations in AWS Detection and Response

Gain a deeper understanding of how you can seamlessly integrate AWS detection and response services.

Methodology for Incident Response on Generative AI Workloads

Learn a methodology that you can use to investigate security incidents involving generative AI-based applications.

AWS Security Incident Response Guide

We present an overview of the fundamentals of responding to security incidents within your AWS Cloud environment.

AWS Security Incident Response Overview

Learn through interactive use cases that guide you through investigating common types of security incidents.

Basics of Amazon Detective

Learn how to analyze, investigate, and quickly identify the root cause of potential security issues.

AWS Incident Response Playbooks Workshop

Learn how to develop incident response playbooks for AWS, including detection & analysis, containment, and more.

Cybersecurity Awareness Training

Filter by:

Pattern

Manage AWS Organizations policies as code

AWS Solution

Landing Zone Accelerator on AWS

Guide

Securing sensitive data by using Secrets Manager and Terraform

Guide

Replatforming mainframe applications using a shared IBM Db2 database

Decision Guide

Choosing an AWS identity service

Guide

Defining Amazon S3 bucket and path names for data lake layers

Security, Identity, & Compliance Blog Posts

Was this page helpful?

Ending Support for Internet Explorer