AWS › AWS Outposts & Hybrid Cloud
How should an organization design its security and identity management approach for workloads running on AWS Outposts within its own data center?
AdvancedAnswer
Security for Outposts workloads follows the same IAM and security group principles used in the standard AWS cloud, since Outposts uses the same underlying control plane and services, meaning organizations should apply the same least privilege IAM policies, network segmentation through security groups and subnets, and encryption practices they already use in the cloud, while also considering the additional physical security responsibilities that come with hosting actual AWS hardware within their own facility.
aws ec2 create-security-group --group-name outposts-app-sg --description 'Security group for Outposts workloads' --vpc-id vpc-12345Real-world example A company running sensitive workloads on Outposts applies the exact same IAM policies and security group rules it already uses in its standard cloud environment, while also adding physical access controls to the room housing the actual Outposts hardware.