How do you manage & secure your AWS infrastructure?
With the large number of design options, setting up a multi-account environment can take a significant amount of time, involve the configuration of multiple accounts and services, and require a deep understanding of AWS services.
This solution can help save time by automating the set-up of an environment for running secure and scalable workloads while implementing an initial security baseline through the creation of core accounts and resources. It also provides a baseline environment to get started with a multi-account architecture, identity and access management, governance, data security, network design, and logging.
Trusted Landing Zone Design
AWS Landing Zone solution incorporates an initial security baseline that builds and implements a customized account security baseline for your organization. The initial security baseline includes the following settings:
- Single CloudTrail is created in each account and configured to send logs to a centrally managed Amazon S3 bucket in the log archive account.
- AWS config rules for monitoring MFA, root account login, security groups, EBS, RDS, S3, etc.
- Security notification architecture
- GaurdDuty findings
There are two cooperation packages to choose from:
Basic package includes:
- Landing Zone design and documentation
- Standard accounts and Organization Units setup
- Installation and configuration of SoftServe’s solution
- Predefined detective and preventive guardrails
- Basic AWS security services setup
- Centralized logging setup
- Integration with default AWS SSO
Advanced package includes all benefits of Basic package and additionally:
- Centralized logging setup
- Centralized network topology implementation
- Custom Landing Zone design
- Custom detective and preventive guardrails
- Advanced AWS security services configuration
- Advanced network setup, i.e., connection to on-premises, VPN, firewalls, etc
- AWS SSO integration with customer’s identity provider
- Advanced accounts customization
- Landing Zone workshops and trainings
