Infrastructure Security

VPC and Private Subnet

Example: Production Database in VPC (Private Subnet) - Keep the high sensitive resources within the VPC with Private subnet and making it not accessible from internet directly, it will be accessible only by the apps/services within the VPC.

Security Groups

Layered Security Approach

• Cloud provider is responsible for the security of the infrastructure/network/services, Consumer is responsible for the security in the cloud services/user data etc.