AWS guidance medium security documentation change
Summary
Updated FOCUS dashboard setup instructions with expanded cloud provider integrations and explicit mention of KMS encryption for billing data
Security assessment
Explicitly states that data is encrypted with custom KMS keys to prevent unauthorized access, including from AWS itself, which documents security controls for sensitive billing information
Diff
diff --git a/guidance/latest/cloud-intelligence-dashboards/focus-dashboard.md b/guidance/latest/cloud-intelligence-dashboards/focus-dashboard.md index 77980bf30..a87e55ddb 100644 --- a//guidance/latest/cloud-intelligence-dashboards/focus-dashboard.md +++ b//guidance/latest/cloud-intelligence-dashboards/focus-dashboard.md @@ -28 +28 @@ CID FOCUS Dashboard is an open source and customizable dashboard which provides - 1. The service AWS Data Exports provides FOCUS data. Use CID [Data Exports](./data-exports.html) stack to activate that in your Management (Payer) Account and configure the replication to a Data Collection account. + 1. AWS Data Exports service provides FOCUS data. Use CID [Data Exports](./data-exports.html) stack to activate that in your Management (Payer) Account and automatically configure the replication to a Data Collection account. @@ -32 +32 @@ CID FOCUS Dashboard is an open source and customizable dashboard which provides - 3. Install the next FOCUS data collection stack that collects the data from other data providers. Typically these stack are leveraging scheduled AWS Lambda or AWS Glue Jobs and retrieve data from API using credentials stored in AWS Secret Manager. Also The data in this case encrypted with custom KMS keys to protect sensitive billing information from any unauthorized access (including AWS). + 3. Install the FOCUS data collection stack(s) that collects the data from other data providers. Currently we provide integrations to collect FOCUS data from [Microsoft Azure](https://catalog.workshops.aws/cidforazure/en-US/03-setup), [Google Cloud Platform](https://catalog.workshops.aws/cid-gcp-cost-dashboard/en-US/02-solution-design) and [Oracle Cloud Infrastructure](https://github.com/awslabs/cid-oci-cost-dashboard/) see more. Typically these stack are leveraging scheduled AWS Lambda or AWS Glue Jobs and retrieve data from API using credentials stored in AWS Secret Manager. Also The data in this case encrypted with custom KMS keys to protect sensitive billing information from any unauthorized access (including AWS). @@ -34 +34 @@ CID FOCUS Dashboard is an open source and customizable dashboard which provides - 4. You can extend to more then one FOCUS data provider. Currently under available: [Microsoft Azure](https://catalog.workshops.aws/cidforazure/en-US/03-setup), [Google Private Cloud](https://catalog.workshops.aws/cid-gcp-cost-dashboard/en-US/02-solution-design) and [Oracle Cloud Infrastructure](https://github.com/awslabs/cid-oci-cost-dashboard/) see more. Contribution for other types of data exports are welcome. + 4. Update [FOCUS Consolidation View](https://github.com/aws-solutions-library-samples/cloud-intelligence-dashboards-framework/blob/main/dashboards/focus/focus_consolidation_view/focus_consolidation_view.sql) to include tables with FOCUS data from other cloud providers @@ -36 +36 @@ CID FOCUS Dashboard is an open source and customizable dashboard which provides - 5. You can also export cost data from OnPremises datacenters or other service providers in the same format and integrate them in similar way. + 5. You can also export cost data from OnPremises datacenters or SaaS providers in the same format and integrate them in similar way. @@ -171,0 +172,6 @@ Please note that dashboards are not updated with update of CloudFormation Stack. + * Mo Mohoboob, Senior Specialist SA + + * Marco De Bianchi, Sr. Delivery Consultant + + * Soham Majumder, Technical Account Manager +