You're reading from Mastering AWS Security - Second Edition

Product type Book

Published in Apr 2024

Publisher Packt

ISBN-13 9781805125440

Pages 370 pages

Edition 2nd Edition

Languages

Concepts

Cloud Security

Author (1):

Laurent Mathieu

Table of Contents (20) Chapters

Preface

1. Part 1: Foundations of AWS Security

2. Chapter 1: Introduction to AWS Security Concepts and the Shared Responsibility Model

3. Chapter 2: Infrastructure Security – Keeping Your VPC secure

4. Chapter 3: Identity and Access Management – Securing Users, Roles, and Policies

5. Chapter 4: Data Protection – Encryption, Key Management, and Data Storage Best Practices

6. Chapter 5: Introduction to AWS Security Services

7. Part 2: Architecting and Deploying Secure AWS Environments

8. Chapter 6: Designing Secure Microservices Architectures in AWS

9. Chapter 7: Implementing Security for Serverless Deployments

10. Chapter 8: Secure Design Patterns for Multi-Tenancy in Shared Environments

11. Chapter 9: Automate Everything to Build Immutable and Ephemeral Resources

12. Part 3: Monitoring, Automation and Continuous Improvement

13. Chapter 10: Advanced Logging, Auditing, and Monitoring in AWS

14. Chapter 11: Security Compliance with AWS Config, AWS Security Hub, and Automated Remediation

15. Chapter 12: DevSecOps – Integrating Security into CI/CD Pipelines

16. Chapter 13: Keeping Up with Evolving AWS Security Best Practices and Threat Landscape

17. Chapter 14: Closing Note

18. Index

Why subscribe?

19. Other Books You May Enjoy

IAM in multi-account deployments

Managing IAM in a multi-account environment is a complex endeavor, especially when dealing with large-scale deployments. AWS provides a suite of tools to streamline this process, but understanding how they fit in the picture is crucial. In this section, we will delve deeper into the challenges, solutions, and best practices for managing IAM in such environments.

Challenges with managing large-scale IAM deployments

IAM management in expansive environments brings forth a myriad of challenges:

Scalability: As organizations grow, so does the need for more AWS resources and accounts. This ensures that IAM policies scale effectively without becoming unwieldy is a challenge.
Granularity versus manageability: As the number of IAM identities grows, administrators face the dilemma of granularity versus manageability. While it is tempting to create highly specific permissions for each identity, this can lead to an administrative nightmare.