Encrypt buckets based on filters/tags and provided criteria for an S3 key.
OPTIMIZE S3 BUCKET CONFIGURATION
Ty Murphy2018-10-15T16:57:14-05:00
Analyze S3 bucket usage and optimize to the right storage tier to reduce costs (if possible).
SHUT DOWN OFF-HOURS INSTANCES
Ty Murphy2018-10-15T16:58:10-05:00
Use tags to shut down development and other instances outside of business hours to save costs. Override with tag changes as needed.
CREATE ALERT FOR ROOT ACCOUNT ACCESS
Ty Murphy2018-10-15T16:52:21-05:00
Create an alert that triggers if someone uses the root account in designated accounts.
CREATE ALERT FOR PUBLIC S3 BUCKETS
Ty Murphy2018-10-15T16:52:09-05:00
Create an alert that triggers instantly whenever and S3 bucket is made public.
CREATE SECURITY GROUP CHANGE ALERT
Ty Murphy2018-10-15T16:52:58-05:00
Create an alert for any changes to the designated security groups in designated accounts or VPCs.
CREATE IAM SECURITY ALERT
Ty Murphy2018-10-15T16:52:51-05:00
Create an alert for any IAM change in designated accounts.
IMPLEMENT CENTRALIZED ALERTING
Ty Murphy2018-10-15T16:53:49-05:00
Link an account into a centralized alerting infrastructure using CloudWatch Logs synchronization to a Kinesis stream. Create everything needed that isn’t there.
SET AWS LOG ROTATION AND ARCHIVING
Ty Murphy2018-10-15T16:58:04-05:00
Set lifecycle policies to migrate logs to Glacier after a designated time period.
ENFORCE MONITORING AND ALERTING
Ty Murphy2018-10-15T16:53:22-05:00
Ensure monitoring and alerting are properly configured, including CloudTrail, Config, CloudWatch and any configured alerts.
ASSESS MONITORING AND ALERTING
Ty Murphy2018-10-15T16:51:14-05:00
Determine if recommended settings for CloudTrail, Config, CloudWatch, and alerting are enabled.
ADD/ADJUST SECURITY ALERT
Ty Murphy2018-10-15T16:49:18-05:00
Add alerts, remove alerts, or configure existing security alerts.