# Security
<a name="security"></a>

 The security pillar includes the ability to protect information, systems, and assets while delivering business value through risk assessments and mitigation. Due to the global visibility and large number of players, games are a desirable target for exploiters, hackers, and others looking for ways to exploit and abuse systems. This can often result in a disappointing player experience and increased costs for the game developer if there isn't a strong security foundation set in place. 

 As described in the [Shared Responsibility Model](https://aws.amazon.com/compliance/shared-responsibility-model/), it's important to understand which aspects of security are the responsibility of AWS and which aspects are the responsibility of the customer so that you are prepared to maintain a strong security posture. This pillar provides best practice cloud security guidance for you to consider when developing and operating games in the cloud. 

 Before you architect a system, you must establish a set of security best practices which includes access controls. Additionally, you should be able to identify security incidents and protect your systems and services while maintaining the confidentiality and integrity of data through data protection. You should have a well-defined and practiced process for responding to security incidents. These tools and techniques are important because they support business objectives such as preventing financial loss or complying with regulatory obligations. 

 **Customer example** 

 AnyCompany Games is a fictional game studio that is in the process of improving their security posture. Security can be straightforward to understand when there's an explanation of its direct application. AnyCompany Games is used in this section to contextualize the security best practices described in the pillar  

**Topics**
+ [Design principles](design-principles-sec.md)
+ [Security foundations](gamesec01.md)
+ [Ongoing security](gamesec02.md)
+ [Identity and access management](gamesec03.md)
+ [Access control](gamesec04.md)
+ [Detection](gamesec05.md)
+ [Infrastructure protection](gamesec06.md)
+ [Incident response](gamesec07.md)
+ [Application security](gamesec08.md)
+ [Automate security](gamesec09.md)
+ [Threat modeling](gamesec10.md)
+ [Resources](resources-sec.md)