Cloud Security Architecture Instantiation – Using Amazon Web Services Security Reference Architecture

In my experience as an Enterprise Architect, I want to share one big-picture view of the instantiation of Cloud Security Architecture. To make this practical, I will resort to the AWS-SRA (Amazon Web Services – Security Reference Architecture). The link below provides details of the AWS-SRA:

• https://docs.aws.amazon.com/prescriptive-guidance/latest/security-reference-architecture/architecture.html

My understanding of one instantiation of the AWS Security Architecture can be depicted as shown below.

I fervently believe that this example will be worth discussing with anybody who can provide feedback. My conviction is that the AWS model is the best among all the cloud platforms in the market today. Hence, my choice of AWS.

If time permits, I will try and provide similar examples for other cloud platforms (Azure, Google Cloud, Oracle Cloud, and the like).