The post explains how to secure Amazon Aurora clusters for HIPAA-compliant workloads through preventative, detective, and responsive controls, ensuring encryption at rest and in transit, limiting cipher suites, implementing certificate authorities, monitoring, and continuous testing.

<div>
<p>This article discusses how to secure Amazon Aurora PostgreSQL or MySQL clusters that handle sensitive HIPAA-compliant workloads requiring a high level of security.</p>
<p>Specifically, the article covers:</p>
<ul>
<li>Preventative controls like encryption at rest, forcing TLS connections, using TLS 1.3, limiting cipher suites, and selecting secure certificate authorities</li>
<li>Detective controls like using CloudWatch metrics, logs, alarms, and SNS notifications to detect security issues like unencrypted connections</li>
<li>Responsive controls like evaluating new cipher suites, preventing deployment if unencrypted connections are allowed, and monitoring for updated TLS cipher lists</li>
<li>Conclusion that security is an ongoing effort requiring vigilance against emerging threats</li>
</ul>
</div>


Secure Amazon Aurora clusters in HIPAA-compliant workloads

Related articles