{"id":22217,"date":"2023-02-13T20:56:46","date_gmt":"2023-02-13T13:56:46","guid":{"rendered":"https:\/\/renovacloud.com\/?p=22217"},"modified":"2024-12-05T13:22:54","modified_gmt":"2024-12-05T06:22:54","slug":"26-aws-security-best-practices-to-adopt-in-production-part-3","status":"publish","type":"post","link":"https:\/\/renovacloud.com\/en\/26-aws-security-best-practices-to-adopt-in-production-part-3\/","title":{"rendered":"26 AWS Security Best Practices to Adopt in Production – Part 3"},"content":{"rendered":"

One of the most important pillars of a well-architected framework is security. Thus, it is important to follow these AWS security best practices to prevent unnecessary security situations.<\/span><\/p>\n

There are many things you must set up if you want your solution to be operative, secure, reliable, performant, and cost effective. And, first things first, the best time to do that is now \u2013 right from the beginning, before you start to design and engineer. Continuing Part 1 and Part 2, here are some AWS security best practices to adopt in Production.<\/span><\/p>\n

AWS Database Migration Service (DMS)<\/b><\/h2>\n

AWS Database Migration Service (AWS DMS) is a cloud service that makes it easy to migrate relational databases, data warehouses, NoSQL databases, and other types of data stores. You can use AWS DMS to migrate your data into the AWS Cloud or between combinations of cloud and on-premises setups.<\/span><\/p>\n

20_Verify AWS Database Migration Service replication instances are not public \ud83d\udfe5\ud83d\udfe5\ud83d\udfe5<\/b><\/h3>\n

Ensure that your Amazon Database Migration Service (DMS) is not publicly accessible from the Internet in order to avoid exposing private data and minimize security risks. A DMS replication instance should have a private IP address and the Publicly Accessible feature disabled when both the source and the target databases are in the same network that is connected to the instance\u2019s VPC through a VPN, VPC peering connection, or using an AWS Direct Connect dedicated connection.<\/span><\/p>\n

    \n
  1. Sign in to AWS Management Console at <\/span>https:\/\/console.aws.amazon.com\/dms\/<\/span><\/a>.<\/span><\/li>\n
  2. In the left navigation panel, choose Replication instances.<\/span><\/li>\n
  3. Select the DMS replication instance that you want to examine to open the panel with the resource configuration details.<\/span><\/li>\n
  4. Select the Overview tab from the dashboard bottom panel and check the Publicly accessible configuration attribute value. If the attribute value is set to Yes, the selected Amazon DMS replication instance is accessible outside the Virtual Private Cloud (VPC) and can be exposed to security risks. To fix it, do the following:<\/span>\n