Securing your workloads
A workload is a collection of resources and code that delivers business value, such as a customer-facing application or a backend process. As you build and deploy workloads on AWS, the controls in this section help you protect your data, limit exposure of sensitive resources, and establish secure defaults. The controls cover managing application secrets, restricting access scope, minimizing access routes to private resources, and encrypting data in transit and at rest.
This section contains the following topics:
-
WKLD.02 Restrict credential usage scope with resource-based policies
-
WKLD.03 Use ephemeral secrets or a secrets management service
-
WKLD.07 Enable CloudTrail data events for Amazon S3 buckets with sensitive data
-
WKLD.12 Use VPC endpoints to access supported AWS and external services
-
WKLD.15 Define security controls in templates and deploy them by using CI/CD practices