Skip to main content


The AWS Foundational Security Best Practices is a set of guidelines and recommendations that define security controls for users of Amazon Web Services (AWS) to follow. The standard aims to establish a strong foundation for secure and compliant operations in the AWS cloud environment.

The scope of the AWS Foundational Security Best Practices is wide-ranging, covering areas such as identity and access management, logging and monitoring, network security, and data protection. It provides a comprehensive approach to security that helps organizations manage risks associated with using AWS services.

The standard is significant because it ensures that AWS customers have access to the best security practices, which can help prevent security breaches and protect against unauthorized access, data loss, and other security threats. It also helps organizations comply with various industry regulations and standards, such as PCI-DSS and HIPAA.

Adherence to the AWS Foundational Security Best Practices can enhance an organization's security posture and build trust with customers and partners. It can also help organizations optimize their use of AWS services by ensuring that they are being used in a secure and compliant manner.

Overall, the AWS Foundational Security Best Practices is an essential standard for any organization using AWS services, providing a strong foundation for security and compliance in the cloud.