About the AWS SRA library
| Influence the future of the AWS Security Reference Architecture (AWS SRA) by taking a short survey |
This guide is part of a library that provides architectural blueprints and technical
guidance for designing and building security architectures on AWS. The library consists of
implementation code (AWS
SRA code library
AWS SRA – core architecture (this guide)
This guide represents a foundation for the recommended AWS security architecture. It is the starting point that applies to all organizations, regardless of their industry, application type, or any other considerations. This foundation helps you build a strong and scalable architecture on AWS and helps create a strong AWS multi-account security baseline that securely scales as your business grows.
AWS SRA – deep dive architectures
The AWS SRA – core architecture guide is complemented by additional publications that provide architectural patterns aligned to specific security capabilities, application types, and compliance or regulatory requirements. These patterns extend the core architecture and should be used in conjunction with the AWS SRA – core architecture guide.
The following guides provide architectural patterns aligned to specific security capabilities:
-
AWS SRA – identity management provides guidance on how to implement a scalable, robust, and centralized identity and access management solution on AWS.
-
AWS SRA – perimeter security discusses architecture patterns and AWS services for implementing edge security in a central account or in individual accounts.
-
AWS SRA – cyber forensics describes how to configure an AWS Forensics account as a starting point to develop your organization's forensic capabilities and to help improve your security incident response (IR) preparedness.
The following guides provide architectural patterns for specific application types. You might want to focus on these after you build your baseline security architecture:
-
AWS SRA – generative AI provides security architectural recommendations for designing and building applications that incorporate generative AI capabilities by using AWS generative AI services.
-
AWS SRA – IoT provides security architectural recommendations for designing and building IoT applications on AWS.
In addition, the following guide describes architectural patterns that are aligned with specific compliance or regulatory frameworks:
-
AWS Privacy Reference Architecture (AWS PRA) provides a security architecture for applications that process personal data and must support broad privacy compliance requirements such as the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), or the Brazilian General Data Protection Law (LGPD). The AWS PRA provides a set of guidelines that are specific to the design and configuration of privacy controls in AWS services.
We recommend that you start with the AWS SRA – core architecture guide to understand the foundational architecture and then consult the complementary guides to take advantage of advanced functionality and implementations.
Architecture diagrams
To customize the reference architecture diagrams in the AWS SRA library based on your business needs, you can download the following .zip file and extract its contents.
