Security in the AWS Cloud

Question 1

What is IAAS?

Answer 1

Infrastructure as a Service (IaaS) is a cloud computing service model that provides virtualized computing resources over the internet. In an IaaS environment, users can rent and manage fundamental IT infrastructure components, such as virtual machines, storage, and networking, without the need to invest in and maintain physical hardware.

Question 2

What is PAAS?

Answer 2

Platform as a Service (PaaS) is a cloud computing service model that provides a platform and environment for developers to build, deploy, and manage applications without the complexities of managing the underlying infrastructure.

PaaS is like a ready-made playground where developers can focus on creating their applications without worrying about the hardware, operating systems, or networking infrastructure.

Question 3

What is SAAS?

Answer 3

Software as a Service (SaaS) is a cloud computing service model that delivers software applications over the internet on a subscription basis. In this model, software is hosted and maintained by a third-party provider, and users can access it via a web browser, eliminating the need to install, configure, or manage the software locally on their devices.

Question 4

What are the responsibilities for the Customer in the responsibility Model

Answer 4

Data & Content
-Data Encryption and Data Backup

Access Control and Identity Management:
- User Access & IAM policies

Security Configuration:
-Firewalls & Security Groups
-Operating system Updates

Compliance and Governance:
-Compliance requirements
-Resource Tagging

Monitoring and Incident Response:
-Monitoring
-Incident Response

Data Integration and Interoperability:
-Data integration
-Interoperability

Cost Management:
-Cost Monitoring
-Billing Management

Education and Training:
-Staff Training
-Security Awareness

Question 5

What are the responsibilities of AWS in the responsibility Model

Answer 5

Global Infrastructure:

Physical Security:

Networking:

Hypervisor and Virtualization Layer:
-Virtualization Security: AWS is responsible for securing the underlying virtualization layer that supports virtual -machines and instances.

Managed Services and Container Platforms:

Identity and Access Management (IAM):
- IAM Service: AWS provides IAM services that allow customers to create and manage user identities, groups, roles,
-and permissions for their AWS resources.
-Authentication: AWS is responsible for authentication mechanisms, ensuring that

AWS Marketplace:

Shared Responsibility for Storage and Data:
-Data Center Storage security and availability of the data center storage infrastructure.

Managed Security Services:
-Security Services: AWS offers various security services and features (e.g., AWS Identity and Access Management,
-AWS Key Management Service, AWS WAF, AWS Shield)