Implementing Zero Trust Framework on AWS
What is Zero Trust?
Zero Trust is a security model centered on the idea that access to data should not be solely made based on network location. It requires users and systems to strongly prove their identities and trustworthiness, and enforces fine-grained identity-based authorization rules before allowing them to access applications, data, and other systems.
Guiding Principles for Building Zero Trust on AWS
Where possible, use identity and network capabilities together
Identity and network controls in AWS can oftentimes complement and augment one another to help you accomplish your specific security objectives. Identity-centric controls offer very strong, flexible, and fine-grained access controls.
Work backwards from your specific use cases
There are a number of common use cases, such as workforce mobility, software-to-software communications, and digital transformation projects that can benefit from the enhanced security provided by Zero Trust. It is important to work backwards from each of the specific use cases that apply to your organization.
Apply Zero Trust to your systems and data in accordance with their value
You should think of Zero Trust concepts as additive to your existing security controls.
