Security and Microservice Architecture on AWS

Index

A

• AAD (additional authenticated data), KMS Contexts and Additional Authenticated Data
• ABAC (attribute-based access control), AWS Tags and Attribute-Based Access Control, Role-Based Access Control
• access control (see authorization and authentication)
• accounts
  • autonomy and agility of, AWS Accounts and Teams
  • CMK (customer master key), Accounts and Sharing CMK, Option 2: Using a Purpose-Built Account to Hold the CMK
  • delegation and, AWS Accounts and Teams
  • enforcing MFA on, Enforcing Multifactor Authentication in Accounts
  • governance and, AWS Accounts and Teams
  • isolation of attacks and, AWS Accounts and Teams
  • KMS, KMS Accounts and Topologies: Tying It All Together-Option 2: Using a Purpose-Built Account to Hold the CMK
  • management, AWS Organizations
  • member, AWS Organizations
  • purpose-built, Purpose-Built Accounts, Purpose-Built Accounts
  • security controls and, AWS Accounts and Teams
  • structure of, for large organizations, AWS Accounts Structure for Large Organizations-Purpose-Built Accounts
• ACL (access control list), Interface VPC endpoints/VPC endpoint services (using PrivateLink), Network Access Control Lists, Security Groups Versus NACLs
• Action, in PARC-E acronym, Structure of AWS IAM Policies
• Active Directory, Basics of Authentication, Organizational units, Simplifying a Complex Domain-Driven Organization Using RBAC, SSO, and AWS Organizations, Simplifying a Complex Domain-Driven Organization Using RBAC, SSO, and AWS Organizations, Example of a SAML Identity Provider for AWS
• activity logging, Activity ...