Security Pillar

 

The ability to protect information, systems, and assets while delivering business value through risk assessments and mitigation strategies.

 

SEC 1. How are you encrypting and protecting your data at rest?

 

SEC 2. How are you encrypting and protecting your data in transit?

 

SEC 3. How are you protecting access to and use of the AWS root account credentials?

 

SEC 4. How are you defining roles and responsibilities of system users to control human access to the AWS Management Console and API?

 

SEC 5. How are you limiting automated access to AWS resources? (e.g., applications, scripts, and/or third-party tool or service)

 

SEC 6. How are you managing keys and credentials?

 

SEC 7. How are you enforcing network and host-level boundary protection?

 

SEC 8. How are you enforcing AWS service level protection?

 

SEC 9. How are you protecting the integrity of the operating system on your Amazon EC2 instances?

 

SEC 10. How are you capturing and analyzing AWS logs?