ANALYSIS OF INFORMATION SECURITY MECHANISMS IN AMAZON WEB SERVICES (AWS) CLOUD

Abstract

Advantages and disadvantages of using cloud technologies in companies are considered. The programmatic mechanisms for protecting data and users’ resources from an unauthorized access that are given by an Amazon Web Services (AWS) cloud service provider are analyzed. The basic vulnerabilities which can be present even when effective programmatic methods for cloud resources safety exist are analyzed. Such problems as obsolescence of the access keys, open ports and untuned safety rules, presence of resources which are not in use in a cloud are highlighted. In the article approaches for increasing data protection strength and information security in the AWS cloud are proposed. Development of the framework is proposed, the main functions of this framework is the following: scanning and removing outdated access keys, open ports, resources which are not in use and vulnerable configurations of protection mechanisms in a cloud. For ease of use of the framework, it is supposed to develop scripts for automating the process of its deployment.