Establishing a data perimeter on AWS: Analyze your account activity to evaluate impact and refine controls

This article provides guidance on analyzing your AWS account activity to evaluate the impact of implementing data perimeter controls and refine those controls as needed. It covers the following key points:

Specifically, the article covers:

• Setting up prerequisites like CloudTrail trails, Athena tables, AWS Config aggregators, and the open-source data perimeter helper tool
• Reviewing API calls to untrusted S3 buckets and refining your resource perimeter policy
• Reviewing granted access and API calls by untrusted identities on your S3 buckets and refining your identity perimeter policy
• Investigating resource configurations like AWS Lambda functions to support implementing network perimeter controls
• Investigating access denied errors to help troubleshoot your deployed controls

The article concludes by providing steps to clean up the configured resources if you were just testing the solution.