Turbot Guardrails Hub 
Hub
  • Mods
  • Policy Packs
  • Docs
  • Home
ModsPolicy PacksDocsHome
Mods
AWS
Loading policies...

Policy: AWS > Well-Architected Tool > AWS Well-Architected Framework > Security > SEC 01. How do you securely operate your workload?

To operate your workload securely, you must apply overarching best practices to every area of security. Take requirements and processes that you have defined in operational excellence at an organizational and workload level, and apply them to all areas. Staying up to date with AWS and industry recommendations and threat intelligence helps you evolve your threat model and control objectives. Automating security processes, testing, and validation allow you to scale your security operations.

See SEC 01. How do you securely operate your workload? for more information.

Targets

This policy targets the following resource types:

  • AWS > Well-Architected Tool > AWS Well-Architected Framework

Primary Policy

This policy is used with the following primary policy:

  • AWS > Well-Architected Tool > AWS Well-Architected Framework > Security

Related Policies

  • Secure AWS account
  • Identify and validate control objectives
  • Evaluate and implement new security services and features regularly
  • Separate workloads using accounts
  • Automate testing and validation of security controls in pipelines
  • Identify and prioritize risks using a threat model
  • Keep up to date with security recommendations
  • Keep up to date with security threats

Controls

Setting this policy configures this control:

  • AWS > Well-Architected Tool > AWS Well-Architected Framework > Security > SEC 01. How do you securely operate your workload?

Policy Specification

Schema Type
string
Default
Skip
Valid Values [YAML]
  • Skip

  • Check: Choices based on sub policies

  • Check: None of these

  • Check: Question does not apply to this workload

  • Enforce: Choices based on sub policies

  • Enforce: None of these

  • Enforce: Question does not apply to this workload
Examples [YAML]
  • Skip

Category

  • Other

In Your Workspace

  • Policy Settings by Type report

Developers

    Category URI
    • tmod:@turbot/turbot#/control/categories/other
    • Policy Type URI
    • tmod:@turbot/aws-wellarchitected-framework#/policy/types/sec01
    • GraphQL
    • query policyType(id: "tmod:@turbot/aws-wellarchitected-framework#/policy/types/sec01") { … }
    • query policySettings(filter: "policyTypeId:'tmod:@turbot/aws-wellarchitected-framework#/policy/types/sec01'") { … }
    • query policyValues(filter: "policyTypeId:'tmod:@turbot/aws-wellarchitected-framework#/policy/types/sec01'") { … }
    • CLI
    • Get Policy Type
    • turbot graphql policy-type --id "tmod:@turbot/aws-wellarchitected-framework#/policy/types/sec01"
      • Get Policy Settings
    • turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/aws-wellarchitected-framework#/policy/types/sec01"
Guardrails
Guardrails Hub
  • Hub
  • Docs
  • Blog
  • Changelog
Products
  • GuardrailsGuardrails
  • PipesPipes
  • SteampipeSteampipe
  • PowerpipePowerpipe
  • FlowpipeFlowpipe
  • TailpipeTailpipe
Turbot
  • Home
  • About us
  • We're hiring!
  • Contact us
Community

Our community of practitioners love to discuss cloud governance & security.

Slack logoJoin us on Slack →

System StatusLegalSecurity
Terms of UseSecurityPrivacy
182
Mods
520
Resource Types
9,026
Policies
3,512
Controls
1,933
Quick Actions
547
IAM