Re: AWS Security

[Josh Richard <jrichar4 () D UMN EDU>]

Hi John,

Outside of work, I have used EC2 and some of the portfolio of services
(beanstalk/VPC) for non-profits.  I find the set of options
interesting.

There are a number of interesting approaches available beyond servers.
 You can create dedicated typologies:
http://aws.amazon.com/cloudformation

or even setup peering with a virtual private cloud over a VPN.

There is a gov cloud region that may be compliant with your requirements:
http://aws.amazon.com/govcloud-us

Also this is interesting for DR:
http://aws.amazon.com/storagegateway

The gov cloud with VPC would allow you to place the sharepoint server
within an isoloated EC2 instance and use a VPN to connect.  This way
you would not have to expose the MS box to the Internet and keep it
internal.  See below:
http://docs.amazonwebservices.com/AmazonVPC/latest/GettingStartedGuide/GetStarted.html?r=895

Regards,
Josh Richard
On Tue, May 8, 2012 at 12:46 PM, John Forker <jforker () maine edu> wrote:
> Has anyone used or looked at AWS (Amazon Web Services) for the purpose of
> cloud server infrastructure?  If so what are the security implications for
> regulatory compliant data that might be stored therein?  E.g., Microsoft and
> Amazon just put together a support site for folks who want to run their own
> Sharepoint infrastructure in AWS.
> ----------------
> John Forker
> Chief Information Security Officer
> University of Maine System
> (207) 973-3293



-- 
Josh Richard
Information Technology Systems & Services
University of Minnesota Duluth