Deciding to adopt an AWS security service - AWS Prescriptive Guidance

Deciding to adopt an AWS security service

Diogo Guedes, Amazon Web Services (AWS)

April 2024 (document history)

Many organizations are unsure about whether they should adopt an AWS security service. Sometimes, there's already an existing solution in place, and organizations must decide whether to trade their current solution for a different service.

For example, your organization might be evaluating whether to adopt Amazon Security Lake in order to centralize your security-related data. Or you might be considering whether your organization should use Amazon Macie to discover and help protect sensitive data in Amazon Simple Storage Service (Amazon S3) buckets. Even if your organization already has other solutions in place, you can evaluate whether an AWS service might reduce costs or improve effectiveness or scalability.

What questions do you need to answer to evaluate whether an AWS security service is a good fit for your organization? This guide provides a decision tree that helps you evaluate whether to adopt a service. This decision tree helps you confidently make a data-driven choice.

Intended audience

This guide is intended for business and IT leaders who need to select security services and solutions for their organization. To use this guide, you should be familiar with business and technical management concepts, such as total cost of ownership (TCO) and proof of technology (POT).

Objectives

By using the decision tree in this guide, you can effectively evaluate whether your organization should adopt an AWS security service. Appropriately evaluating the business and technical requirements can provide organizational opportunities, such as cost savings, improved risk mitigation, automation, agility, scalability, and effectiveness.

Data-driven decisions support the adoption and raise the security posture of your company, sustaining growth and helping you achieve business goals.