What is the term given to the total environment in which a service is delivered?
|
Security and Compliance is a shared responsibility between AWS and the customer. This shared model can help relieve the customer’s operational burden as AWS operates, manages and controls the components from the host operating system and virtualization layer down to the physical security of the facilities in which the service operates. The customer assumes responsibility
and management of the guest operating system (including updates and security patches), other associated application software as well as the configuration of the AWS provided security group firewall. Customers should carefully consider the services they choose as their responsibilities vary depending on the services used, the integration of those services into their IT environment, and applicable laws and regulations. The nature of this shared responsibility also provides the flexibility and
customer control that permits the deployment. As shown in the chart below, this differentiation of responsibility is commonly referred to as Security “of” the Cloud versus Security “in” the Cloud. Show
AWS responsibility “Security of the Cloud” - AWS is responsible for protecting the infrastructure that runs all of the services offered in the AWS Cloud. This infrastructure is composed of the hardware, software, networking, and facilities that run AWS Cloud services. Customer
responsibility “Security in the Cloud” – Customer responsibility will be determined by the AWS Cloud services that a customer selects. This determines the amount of configuration work the customer must perform as part of their security responsibilities. For example, a service such as Amazon Elastic Compute Cloud (Amazon EC2) is categorized as Infrastructure as a Service (IaaS) and, as such, requires the customer to perform all of the necessary security configuration and management tasks.
Customers that deploy an Amazon EC2 instance are responsible for management of the guest operating system (including updates and security patches), any application software or utilities installed by the customer on the instances, and the configuration of the AWS-provided firewall (called a security group) on each instance. For abstracted services, such as Amazon S3 and Amazon DynamoDB, AWS operates the infrastructure layer, the operating system, and platforms, and customers access the
endpoints to store and retrieve data. Customers are responsible for managing their data (including encryption options), classifying their assets, and using IAM tools to apply the appropriate permissions.  This customer/AWS shared responsibility model also extends to IT controls. Just as the responsibility to operate the IT environment is shared between AWS and its customers, so is the management, operation and verification of IT controls shared. AWS can help relieve customer burden of operating controls by managing those controls associated with the physical infrastructure deployed in the AWS environment that may previously have been managed by the customer. As every customer is deployed differently in AWS, customers can take advantage of shifting management of certain IT controls to AWS which results in a (new) distributed control environment. Customers can then use the AWS control and compliance documentation available to them to perform their control evaluation and verification procedures as required. Below are examples of controls that are managed by AWS, AWS Customers and/or both. Inherited Controls – Controls which a customer fully inherits from AWS.
Shared Controls – Controls which apply to both the infrastructure layer and customer layers, but in completely separate contexts or perspectives. In a shared control, AWS provides the requirements for the infrastructure and the customer must provide their own control implementation within their use of AWS services. Examples include:
Customer Specific – Controls which are solely the responsibility of the customer based on the application they are deploying within AWS services. Examples include:
Applying the AWS Shared Responsibility Model in PracticeOnce a customer understands the AWS Shared Responsibility Model and how it generally applies to operating in the cloud, they must determine how it applies to their use case. Customer responsibility varies based on many factors, including the AWS services and Regions they choose, the integration of those services into their IT environment, and the laws and regulations applicable to their organization and workload. The following exercises can help customers in determining the distribution of responsibility based on specific use case: Review the security functionality and configuration options of individual AWS services within the security chapters of
AWS service documentation. Provide your internal and external audit teams with cloud-specific learning opportunities by leveraging the Cloud Audit Academy training programs. Perform a Well-Architected Review of your AWS workloads to evaluate the implementation of best practices for security, reliability, and performance. Explore solutions available in the AWS Marketplace digital catalog with thousands of software listings from
independent software vendors that enable you to find, test, buy, and deploy software that runs on AWS. Explore
AWS Security Competency Partners offering expertise and proven customer success securing every stage of cloud adoption, from
initial migration through ongoing day-to-day management. Have Questions? Connect with an AWS Business Representative AWS support for Internet Explorer ends on 07/31/2022. Supported browsers are Chrome, Firefox, Edge, and Safari. Learn more » What is the term for a market in which products are sold to organizations who will use them to make other products?A business market is a method a company uses to sell products or services to a specific group of consumers. Typically, business markets facilitate sales from one business to another in cases where one business plans to reuse or resell another company's products or services.
What is an alternative term for a distribution channel?An alternative term is distribution channel or 'route-to-market'. It is a 'path' or 'pipeline' through which goods and services flow in one direction (from vendor to the consumer), and the payments generated by them flow in the opposite direction (from consumer to the vendor).
What can be characterized as pure service?Examples of pure service businesses include airlines, banks, computer service bureaus, law firms, plumbing repair companies, motion picture theaters, and management consulting firms.
What is the marketing term for how a target market perceives a brand in relation to competing brands?In marketing and business strategy, market position refers to the consumer's perception of a brand or product in relation to competing brands or products. Market positioning refers to the process of establishing the image or identity of a brand or product so that consumers perceive it in a certain way.
|
