How to: Security Engineering on AWS
* [AWS Security Checklist](https://d1.awsstatic.com/whitepapers/Security/AWS_Security_Checklist.pdf)
* [AWS Security Reference Architecture (AWS SRA)](https://docs.aws.amazon.com/prescriptive-guidance/latest/security-reference-architecture/welcome.html)
* [AWS Privacy Reference Architecture](https://docs.aws.amazon.com/prescriptive-guidance/latest/privacy-reference-architecture/aws-privacy-reference-architecture.html)
* [AWS Startup Security Baseline (AWS SSB)](https://docs.aws.amazon.com/prescriptive-guidance/latest/aws-startup-security-baseline/controls-acct.html)
* [Privacy Features of AWS Services](https://aws.amazon.com/compliance/privacy-features/)
* [Shared Responsibility Model](https://aws.amazon.com/compliance/shared-responsibility-model/)
* [AWS Cloud Adoption Framework (CAF) - Security Perspective](https://d1.awsstatic.com/whitepapers/AWS_CAF_Security_Perspective.pdf)
* [Navegando na conformidade com a LGPD na AWS](https://d1.awsstatic.com/whitepapers/pt_BR/compliance/LGPD_Compliance_on_AWS.pdf)
* [NIST Cybersecurity Framework (CSF) - Aligning to the NIST CSF in the AWS Cloud](https://d0.awsstatic.com/whitepapers/compliance/NIST_Cybersecurity_Framework_CSF.pdf)
* [AWS Services in Scope by Compliance Program](https://aws.amazon.com/compliance/services-in-scope/)
* [PCI Compliance on AWS](https://aws.amazon.com/compliance/pci-dss-level-1-faqs/)
* [AWS Security Incident Response Guide](https://d1.awsstatic.com/whitepapers/aws_security_incident_response.pdf)
* [How to approach threat modeling](https://aws.amazon.com/blogs/security/how-to-approach-threat-modeling/)
* [Provable Security - Automated Reasoning](https://aws.amazon.com/security/provable-security/)
* [AWS IP Address Ranges](https://docs.aws.amazon.com/general/latest/gr/aws-ip-ranges.html)
* [IAM Best Practices](https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html)
* [Limitations on IAM Entities and Objects](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-limits.html)
* [IAM JSON Policy Elements Reference](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements.html)
* [IAM Policy Elements: Variables and Tags](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_variables.html)
* [IAM: Policies and Permissions](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html)
* [How to define least-privileged permissions for actions called by AWS services](https://aws.amazon.com/blogs/security/how-to-define-least-privileged-permissions-for-actions-called-by-aws-services/)
* [Create fine-grained session permissions using IAM managed policies](https://aws.amazon.com/blogs/security/create-fine-grained-session-permissions-using-iam-managed-policies/)
* [Permissions Boundaries for IAM Entities ](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html?icmpid=docs_iam_console)
* [How can I use permissions boundaries to limit the scope of IAM users and roles and prevent privilege escalation?](https://aws.amazon.com/premiumsupport/knowledge-center/iam-permission-boundaries/)
* [Policy evaluation logic](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_evaluation-logic.html)
* [AWS Global Condition Context Keys](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html)
* [Creating a Condition with Multiple Keys or Values](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_multi-value-conditions.html)
* [How can I use IAM policy tags to restrict how an EC2 instance or EBS volume can be created?](https://aws.amazon.com/premiumsupport/knowledge-center/iam-policy-tags-restrict/)
* [Using Service-Linked Roles](https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html)
* [Approaches for authenticating external applications in a machine-to-machine scenario](https://aws.amazon.com/blogs/security/approaches-for-authenticating-external-applications-in-a-machine-to-machine-scenario/)
* [AWS Services That Work with IAM ](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_aws-services-that-work-with-iam.html)
* [Tighten S3 permissions for your IAM users and roles using access history of S3 actions](https://aws.amazon.com/blogs/security/tighten-s3-permissions-iam-users-and-roles-using-access-history-s3-actions/)
* [Automate analyzing your permissions using IAM access advisor APIs](https://aws.amazon.com/blogs/security/automate-analyzing-permissions-using-iam-access-advisor/)
* [Proving security at scale with automated reasoning](https://www.allthingsdistributed.com/2019/06/proving-security-at-scale-with-automated-reasoning.html)
* [How AWS uses automated reasoning to help you achieve security at scale (AWS Zelkova)](https://aws.amazon.com/blogs/security/protect-sensitive-data-in-the-cloud-with-automated-reasoning-zelkova/)
* [IAM Access Analyzer - Por que habilitar?](https://youtu.be/YcAtr2tKSfo)
* [Access Analyzer policy validation](https://docs.aws.amazon.com/IAM/latest/Us