Can you imagine not having a firewall to protect your network?

NGLZ Shield Add a Data Perimeter Protection to your AWS Organization, it is a set of preventive guardrails in your AWS environment you use to help ensure that only your trusted identities are accessing trusted resources from expected networks.

NGLZ Shield guardrails serve as always-on boundaries to help protect your data across a broad set of AWS accounts and resources. These organization-wide guardrails do not replace your existing fine-grained access controls. Instead, they help improve your security strategy by ensuring that all AWS Identity and Access Management (IAM) users, roles, and resources adhere to a set of defined security standards.

Using NGLZ Shield customers benefit from a “triangular security solution” that deploys a set of preventative guardrails to help ensure that only trusted identities are accessing trusted resources from trusted networks

NGLZ Shield enforces the fundamental Data Perimeter principles:

Trusted identities: Principals (IAM roles or users) within your AWS accounts or AWS services acting on your behalf.

Trusted resources: Resources owned by your AWS accounts or by AWS services acting on your behalf.

Expected networks: Your on-premises data centers, virtual private clouds (VPCs), or networks of AWS services acting on your behalf.

Resource-Bases Policies Automation: A unique capability of NGLZ Shield is fully automated enforcement of the Data Perimeter guardrails to AWS Resources through automatic enablement of Data Perimeter Policies into Resource-Bases Policies, providing matching capabilities to AWS Service Control Policies (SCP) but for your AWS Resources.