AWS Security Blog

Tag: Multiple accounts

How to perform automated incident response in a multi-account environment

How quickly you respond to security incidents is key to minimizing their impacts. Automating incident response helps you scale your capabilities, rapidly reduce the scope of compromised resources, and reduce repetitive work by security teams. But when you use automation, you also must manage exceptions to standard response procedures. In this post, I provide a […]

Read More

Simplify DNS management in a multi-account environment with Route 53 Resolver

April 15, 2021: In the section “Third use case,” we updated the diagram and steps for clarity. April 2, 2021: In the section “Step 1: Set up a centralized DNS account,” we updated step 4. June 5, 2019: We updated all of the figures in the post for clarity and added two paragraphs in the […]

Read More

How to automate SAML federation to multiple AWS accounts from Microsoft Azure Active Directory

December 2, 2019: Since the author wrote this post, AWS Single Sign On (AWS SSO) has launched native features that simplify using Azure Active Directory as an identity provider. Therefore, AWS SSO is now the recommended solution for enabling SAML federation using Azure AD. See this blog post for details. You can use federation to […]

Read More

How to Manage Amazon GuardDuty Security Findings Across Multiple Accounts

September 9, 2021: Amazon Elasticsearch Service has been renamed to Amazon OpenSearch Service. See details. Introduced at AWS re:Invent 2017, Amazon GuardDuty is a managed threat detection service that continuously monitors for malicious or unauthorized behavior to help you protect your AWS accounts and workloads. In an AWS Blog post, Jeff Barr shows you how to […]

Read More