AWS threat model

About this example

This AWS threat model diagram provides a visual representation of securing sensitive user data. Here’s what it illustrates:

• Data Flow Security: Demonstrates how user data, specifically phone numbers, is securely transmitted and stored within AWS.
• Encryption and Decryption: Highlights the use of AWS services for encryption in transit and at rest, ensuring data confidentiality.
• Role-Based Access: Indicates the use of AWS Management Console for controlled access to decrypted data.
• Secure Storage: Depicts how AWS Secrets Manager securely stores encryption keys separate from encrypted data in DynamoDB.

When to use

• Data Protection Planning: When planning security measures for sensitive user data within an AWS environment.
• Compliance Requirements: To ensure adherence to regulatory standards that mandate data encryption and secure key management.
• Security Auditing: While evaluating or improving existing security infrastructure to prevent unauthorized data access.

How to use

1. Start editing: Duplicate the example file and begin customizing the diagram to align with your specific AWS security setup.
2. Customize diagram: Modify the diagram elements to represent the actual services and data flows used in your environment.
3. Customize layout: Rearrange the components for better clarity or to accommodate additional security layers.
4. Collect feedback: Circulate the updated diagram among your security and DevOps teams for insights and validation.