> For the complete documentation index, see [llms.txt](https://huy312100.gitbook.io/software-development/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://huy312100.gitbook.io/software-development/cloud-service/aws/certificate/clf-c02/aws-architecting-and-ecosystem/well-architected-framework/security.md).

# Security

• Includes the ability to protect information, systems, and assets while delivering business value through risk assessments and mitigation strategies

• Design Principles

* Implement a strong identity foundation - Centralize privilege management and reduce (or even eliminate) reliance on long-term credentials - Principle of least privilege - IAM
* Enable traceability - Integrate logs and metrics with systems to automatically respond and take action
* Apply security at all layers - Like edge network, VPC, subnet, load balancer, every instance, operating system, and application
* Automate security best practices
* Protect data in transit and at rest - Encryption, tokenization, and access control
* Keep people away from data - Reduce or eliminate the need for direct access or manual processing of data
* Prepare for security events - Run incident response simulations and use tools with automation to increase your speed for detection, investigation, and recovery
* Shared Responsibility Model

<figure><img src="https://1722711354-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FwNXdoUkfmcozr29fRrfb%2Fuploads%2FJqpppcFV18etdzd4X8g6%2FScreenshot%202023-12-24%20at%2023.30.50.png?alt=media&amp;token=0d1c09a9-aa92-4b7c-ad37-3debdb340108" alt=""><figcaption></figcaption></figure>