How to Design a Least Privilege Architecture in AWS

A least privilege architecture reduces risk and minimize disruptions by allowing only the minimum required authority to perform tasks. This architecture should include authentication and authorization controls, network access and inspection controls, and monitoring/enforcement controls for both the...

By

Dave Shackleford

April 23, 2020

Login to download

I consent that SANS may provide my contact information to a third-party sponsor of this white paper, and that the sponsor may contact me to describe their goods and services related to this white paper.

By providing this information, you agree to the processing of your personal data by SANS as described in our Privacy Policy.

All papers are copyrighted. No re-posting of papers is permitted

Sponsored By

Related Webcast

How to Design a Least Privilege Architecture in AWS

Implementing a least privilege architecture can reduce risk and minimize disruptions by allowing only the minimum required authority to perform a duty or task. Adding network micro-segmentation also restricts east-west movement to reduce the number of vulnerable pathways to applications. When...

Related Content

Why SANS - Blog - Zero Trust - Best Practices for Securing Your Network with Zero Trust Network Access_340 x 340.jpg

Cybersecurity Insights

August 16, 2024

Best Practices for Securing Your Network with Zero Trust Network Access

Zero Trust Network Access has emerged from the rapidly evolving world of cybersecurity as a critical strategy for protecting networks.

Why SANS_Zero Trust Infograpic_promo_340 x 340.jpg

Cybersecurity Insights

10 Steps To Implement A Zero Trust Architecture

This infographic outlines ten essential steps to successfully implement a Zero Trust Architecture.

Blog: Defending Against Ransomware in ICS

Cybersecurity Insights, Digital Forensics, Incident Response & Threat Hunting, Industrial Control Systems Security

August 30, 2023

Defending Against Ransomware in Industrial Control Systems

Leveraging ICS612 and the SANS Five Critical Cybersecurity Controls