Category: Security, Identity, & Compliance

You have an awesome application running on AWS, and now your customers and partners want a private network connection to it. Great! Except for one problem: their site is using the same private IP address range as the one in your Amazon Virtual Private Cloud (Amazon VPC). This will prevent any communication until you resolve […]

Having a multi-account strategy is a best practice for achieving higher isolation of resources in AWS. It helps you to meet regulatory and compliance needs, track operational costs, and add an extra layer of security. AWS Control Tower uses AWS best practices to establish a well-architected, multi-account baseline across your AWS accounts. For more information […]

As you shift your workloads to AWS, you must ensure that access to them is seamless, secure, and optimized for your employees, remote workers, and contractors. When looking at workload access, you should consider the type of user, whether the access is from a managed or unmanaged device, and whether the location is well known […]

AWS Marketplace admins are responsible for managing AWS Marketplace approved products using AWS Private Marketplace and distributing entitlement to products using AWS License Manager. The challenge is managing AWS Marketplace products subscriptions and entitlements with minimal operational overhead as the number of participating AWS Organizations child accounts grow. In a multi-account AWS environment, AWS Marketplace […]

During the cloud journey, some of my customers must create identity principals, such as roles or users. Engineers or services use these roles to perform their jobs in the cloud. To support this effort, Sonrai Security has developed an integration with AWS Control Tower. This integration enables you to see all of the security policies […]

Introduction Since its launch in 2014, Amazon Elastic Container Service (Amazon ECS) has simplified ways to allow you to run containerized workloads at scale. On May 27, 2021, AWS announced Amazon ECS Anywhere (ECS Anywhere), a new launch type that allows you to run containerized workloads anywhere including on premises, on virtual machines (VMs), on […]

AWS Marketplace buyers can now use managed entitlements to share product licenses to all accounts in your organization in AWS Organizations. Managed entitlements for AWS Marketplace help buyers automatically create licenses corresponding to product subscriptions across the AWS Marketplace catalog. This gives buyers the ability to manage and distribute access rights (or entitlements) to those […]

AWS users occasionally need to perform analysis on data sources containing private or sensitive inputs. Inpher’s XOR Secret Computing Platform, available in AWS Marketplace, enables data scientists to train and run machine learning models while maintaining data privacy and without trading utility. Data analysis and machine learning performed by XOR can improve model performance with […]

AWS Control Tower provides a ready-to-use native integration with AWS Single Sign-On (AWS SSO) to manage users, roles, and multi-account access. Some customers’ organizations have more complex SSO requirements, including integrating with external identity providers to handle authentication and authorization. Okta is an enterprise-grade identity management service that is built for the cloud, but is […]

Along with adopting and managing a multi-account structure, customers must also manage user authentication and authorization. Customers who use a multi-account structure governed by AWS Control Tower require a centralized system to manage user authentication and authorization. AWS Control Tower enables customers to manage and govern a multi-account structure. After you have launched AWS Control […]