AWS re:Invent 2016: Reduce Blast Radius by Using Multiple AWS Accounts Per Region & Service (SEC304)

Опубликовано 1 декабря 2016, 21:58

This session shows you how to reduce your blast radius by using multiple AWS accounts per region and service, which helps limit the impact of a critical event such as a security breach. Using multiple accounts helps you define boundaries and provides blast-radius isolation. Though managing multiple accounts can be difficult, we will present an upcoming AWS solution that will help automate the process for controlling cross- account access by managing roles across multiple accounts.