AWS Cloud Security Services

Aujas can offer AWS consulting and system integration expertise to enable cloud security transformation, interlock and align security to changing business needs, enhance cloud maturity, streamline native security capabilities, and secure data, workloads, assets, and users. By adopting an end-to-end operational approach, Aujas can speed your digital transformation and cloud migration efforts by operationalizing cloud native capabilities within a SOC to simplify security management and help identify and mitigate complex threats.

Cloud Infrastructure Security Foundation

• Design & architect cloud foundation plans and prepare HLD, LLD and architecture diagrams.
• Build and deploy LBs, gateways, VPCs, VNets/Subnets, SGs, VMs, routings, Active Directory, disaster recovery, and backups.
• Design & architect deployment plan for cloud-native & external network & infrastructure security solutions such as Firewall, VPN, NACLs, WAF, DDOS protection based on recommendations of post migration/assessment of cloud and on-prem environments.
• Perform build, implementation, and fine tuning of security controls for cloud workloads.
• Policy configuration and validation of implemented controls and policies.

Data Security

• Implement and configure/create S3 buckets with appropriate roles and permissions for users and applications.
• Create certificates and encryption keys for cloud foundation related security requirements.
• Enable encryption for file & storage, databases, VM deployments, IaaS/PaaS service configurations.
• Implement and configure Amazon Macie, KMS, CloudHSM, certificates & secrets manager, and DLP solutions.
• Enable a security policy for encryption key strength, keys/secrets rotation, role & access privileges.

Application Security

• Avail VMs and containers configured for application deployment.
• Configure routing through LBs, gateways for application access.
• Implement & configure WAF, application gateway, CASB with policies and rules.
• Fine tune WAF protection rules based on application context.
• Enable CI integration with CSPM and CWPP platforms for vulnerability and compliance management.
• Map application access routes in WAF and firewalls.

Identity Security

• Implement & configure an Active Directory into the cloud, and/or extend on-premises Active Directory to cloud for identity & access management.
• Configure & assign custom/standard IAM roles & privileges to identities & app services based on access requirements.
• IAM Governance and Compliance
  
  • Audit and Assessment
  • Access Review
• Cloud IAM Lifecycle Management
• Identity Protection
  
  • Multi-Factor Authentication
  • Single Sign-On (SSO)
  • Conditional Access
• Secure Identity Federation

Managed Security Services

• Health monitoring of cloud resources, CPU, memory & storage consumption.
• Cloud resources & cost management, and optimization.
• Captive and MSSP managed services as per in-scope cloud-native/external security solutions.
• Real-time monitoring of alerts and incidents, policy configuration and optimization of cloud security (native/external) solutions.
• Use-case development as part of security transformation & enhancement.
• Managed support for security incidents investigations, response, and monitoring.

AWS Native SIEM/SOAR Management

• Implementation & managed security services using AWS Security Hub, Amazon Inspector, Amazon GuardDuty, Amazon Detective, AWS Config, Amazon CloudWatch, etc.
• Focussed services on SIEM/SOAR Security Event Management & Managed Detection and Response.
  

Threat Protection (Amazon GuardDuty)

• Implementation & managed security services for Amazon GuardDuty and AWS Security Hub.

AWS Cloud Application Protection

• Implementation & managed security services using CASB solutions.

Information Protection and Data Governance

• Implementation & managed services to discover, classify and protect sensitive information with constant visbility to know security posture across AWS environment using Amazon Macie.

Identity and Access Management

• Implementation & managed services to securely manage identities, resources, and permissions to scale using AWS IAM, AWS Directory Service, AWS Resource Access Manager, AWS SSO services.

Cloud Native Security (Cloud Foundation Security)

• Implementation services to build cloud foundation (native) security controls to protect networks, applications, data and identities.