About the AWS SRA library
| Influence the future of the AWS Security Reference Architecture (AWS SRA) by taking a short survey |
This guide is part of a library that provides architectural blueprints and technical
guidance for designing and building security architectures on AWS. The library
consists of implementation code (AWS
SRA code library
AWS SRA – core architecture guide
The AWS SRA – core architecture guide represents a foundation for the recommended AWS security architecture. It is the starting point that applies to all organizations, regardless of their industry, application type, or any other considerations. This foundation helps you build a strong and scalable architecture on AWS and helps create a strong AWS multi-account security baseline that scales securely as your business grows.
AWS SRA – deep dive architectures
The AWS SRA – core architecture guide is complemented by additional publications that provide architectural patterns aligned to specific security capabilities, application types, and compliance or regulatory requirements. These patterns extend the core architecture and should be used with the AWS SRA – core architecture guide.
The following guides provide architectural patterns aligned to specific security capabilities:
-
AWS SRA – identity management provides guidance on how to implement a scalable, robust, and centralized identity and access management solution on AWS.
-
AWS SRA – perimeter security discusses architecture patterns and AWS services for implementing edge security in a central account or in individual accounts.
-
AWS SRA – cyber forensics describes how to configure an AWS Forensics account as a starting point to develop your organization's forensic capabilities and to help improve your security incident response (IR) preparedness.
The following guides provide architectural patterns for specific application types. You might want to focus on these guides after you build your baseline security architecture:
-
AWS SRA – AI security (this guide) provides security architectural recommendations to protect AI workloads deployed on AWS.
-
AWS SRA – IoT provides security architectural recommendations for designing and building IoT applications on AWS.
In addition, the following guide describes architectural patterns that are aligned with specific compliance or regulatory frameworks:
-
AWS Privacy Reference Architecture (AWS PRA) provides a security architecture for applications that process personal data and must support broad privacy compliance requirements such as the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), or the Brazilian General Data Protection Law (LGPD). The AWS PRA provides a set of guidelines that are specific to the design and configuration of privacy controls in AWS services.
We recommend that you start with the AWS SRA – core
architecture guide to understand the foundational architecture. Then
consult the complementary guides to take advantage of advanced functionality and
implementations. For more information about this content set, see AWS
Security Reference Architecture
To customize the reference architecture diagrams in the AWS SRA library based on your business needs, you can download the following .zip file and extract its contents.
Tip
To customize the reference architecture diagrams in the AWS SRA library based on your business needs, you can download the following .zip file and extract its contents.
