securityamazon-web-servicesamazon-ec2intrusion-detection

Intrustion Detection System on the AWS platform


Is there a solution for an intrustion detection system on the AWS platform? Would you have to go 3rd party or do they have their own offering?

Thanks!


Solution

  • Your question is very general. IDS systems look a bit different in the cloud compared to on-premise "traditional" setups and AWS provides a wide array of options in the security area for example: IAM, CloudTrail & VPC Flow Logs. They can serve as building blocks for IDS depending on what you want to achieve.

    If you are asking about more "traditional" IDS systems (network-sniffing boxes), there are lots of solutions available on AWS Marketplace via partners, for example: Sophos, AlertLogic, TrendMicro, CloudPassage.

    The best recommendation I could give you is watching below videos to get a better overview what are your options:

    AWS re:Invent 2015 | (SEC205) Learn How to Hackproof Your Cloud Using Native AWS Tools

    AWS re:Invent 2014 | (SEC402) Intrusion Detection in the Cloud

    Intrusion Detection in the Cloud (SEC402) | AWS re:Invent 2013