Overview

p7-SecurityFoundation is the configuration of a secure, multi-account AWS environment based on AWS best practices. It is deployed with a suite of automated AWS security services configured to deliver on threat detection, data protection and maintain security compliance.

Control Tower provides a set of rules called Guardrails that help enforce security policies and help detect policy violations, and also an ‘Account Factory’ that standardises and automates the provisioning of new accounts according to pre-approved configuration templates.

p7-SecurityFoundation also includes AWS Single Sign-On, a single sign-on (SSO) service that makes it easy to centrally manage SSO access to all of your AWS accounts and cloud applications.

Security findings from the security services are channelled to AWS Security Hub where then can be collated, analysed and prioritised for remediation. Remediation of the most critical and high severity issues are included within the initial configuration package and are untaken in consultation with the customer's technical team.