How do i setup multiple accounts with security best practices?

Question

We are trying to migrate our on premise servers to cloud and new to this setup. We may have more than one account. Wanted to make sure that Accounts are setup with Inbuilt security controls etc. Is there a service/offering to do this?
Our stakeholders would  prefer to have pre-baked compliance controls for HIPAA and other major healthcare compliance elements part of their cloud infrastructure setup. Appreciate any guidance on this

Accepted Answer

There are a couple of different approaches the customer could adopt as self-service options. Control tower automates the setup of a landing zone which can be used as an initial security baseline for managing a multi-account strategy securely - https://aws.amazon.com/solutions/implementations/customizations-for-aws-control-tower/.

Following this, Landing zone accelerator is a tool available as OSS & custom built to suit different industry specific compliance requirements. It helps in accelerating the setup of a secure and compliant infrastructure as code reference architecture. 
 
**Solutions Library** - https://aws.amazon.com/solutions/implementations/landing-zone-accelerator-on-aws/

**Docs** - https://docs.aws.amazon.com/solutions/latest/landing-zone-accelerator-on-aws/solution-overview.html

**Github** - https://github.com/awslabs/landing-zone-accelerator-on-aws/tree/main/reference/sample-configurations

Answer

This AWS document may be helpful.  
This document describes best practices for operating security using the AWS Config service.  
https://docs.aws.amazon.com/config/latest/developerguide/operational-best-practices-for-hipaa_security.html

How do i setup multiple accounts with security best practices?

Contenuto pertinente