BJSS: AWS Security Starter Pack (20 hours)

BJSS will configure AWS security services to help improve your security posture and reduce the risk of security incidents and data breaches. By enabling and configuring services such as Amazon GuardDuty, AWS Config (to use Security Hub), AWS Security Hub, AWS Shield Advanced, and KMS encryption for EBS and S3 buckets, you can achieve increased visibility and monitoring of your AWS environment, as well as increased compliance with industry standards and regulations.

This engagement is a 20-hour block of Professional Services that may include some of all of the following – please contact us for additional details:

Using AWS Organizations, enable/configure:

1. Amazon GuardDuty to continuously monitor for suspicious activities and unauthorized behavior in your AWS environment.
2. AWS Config (Recorder) to assess, audit and evaluate the configuration of AWS resources (This is required to use Security Hub)
3. AWS Security Hub to provide a centralized view of security and compliance across multiple AWS accounts.
4. AWS Shield Advanced to provide additional protection for AWS resources against DDoS attacks.
5. KMS encryption for EBS and S3 buckets to provide encryption-at-rest for data stored in these resources.

The deliverables for this engagement will include:

1. A detailed scope of work document outlining the configuration of the security services to be delivered.
2. Configuration of Amazon GuardDuty, including customized threat detection rules and monitoring policies.
3. Configuration of AWS Config, including customized evaluation rules and remediation actions.
4. Configuration of AWS Security Hub, including customized compliance standards and event management.
5. Configuration of AWS Shield Advanced, including customized DDoS protection policies and traffic management rules.
6. Configuration of KMS encryption for EBS and S3 buckets, including customized key management policies and access controls.
7. Documentation of the configuration process.
8. Knowledge transfer session(s) to enable your IT staff to maintain and manage the configured security services.