Security in AWS Security Agent - AWS Security Agent

Security in AWS Security Agent

Cloud security at AWS is the highest priority. As an AWS customer, you benefit from a data center and network architecture that is built to meet the requirements of the most security-sensitive organizations.

Security is a shared responsibility between AWS and you. The shared responsibility model describes this as security of the cloud and security in the cloud:

  • Security of the cloud – AWS is responsible for protecting the infrastructure that runs AWS Security Agent in the AWS Cloud. This includes the service infrastructure, AI models, and penetration testing agents. Third-party auditors regularly test and verify the effectiveness of our security as part of the AWS compliance programs.

  • Security in the cloud – Your responsibility includes the following areas:

    • Managing access to AWS Security Agent through IAM policies and permissions

    • Protecting the content you provide to the service, including design documents, code repositories, and application URLs for penetration testing

    • Configuring which repositories and applications are monitored

    • Reviewing and acting on security findings provided by the service

    • Securing your applications based on the remediation guidance provided

    • The sensitivity of your data, your company’s requirements, and applicable laws and regulations

This documentation helps you understand how to apply the shared responsibility model when using AWS Security Agent.