Implementation of Defense In Depth and IAM Best Practices Based on Segmented VPC Architecture Using Amazon Web Services (AWS) for Small Business Network Security
Abstract
This study presents the design, implementation, and validation of a cloud security architecture on Amazon Web Services (AWS) that integrates Defense in Depth strategies with Identity and Access Management (IAM) Best Practices, tailored for small and medium-sized enterprises (SMEs). Using the AWS Free Tier, an experimental cloud infrastructure was constructed to evaluate the effectiveness of multi-layered protection encompassing network segmentation, least-privilege access control, and real-time monitoring. The architecture employed a segmented Virtual Private Cloud (VPC) with public and private subnets, controlled by Security Groups (SGs) and Network Access Control Lists (NACLs), while IAM policies and Multi-Factor Authentication (MFA) enforced identity-level security. Centralized monitoring through CloudTrail and CloudWatch enabled anomaly detection and event logging with high accuracy. Test results showed that unauthorized access was effectively blocked, suspicious activities were detected promptly, and all administrative actions were recorded reliably. The findings indicate that combining layered network defenses and IAM governance significantly enhances the resilience, visibility, and security posture of SMEs adopting AWS environments. Beyond its technical effectiveness, the model offers scalability, auditability, and cost-efficiency—demonstrating that enterprise-grade protection can be achieved even within the resource constraints of SMEs. Future work is encouraged to integrate automation and advanced AWS tools such as GuardDuty and Config to strengthen real-world adaptability and compliance.
Article Discovery & Scholarly Lookup
DOIAuthor Biographies
Informatics Engineering Study Program, Sekolah Tinggi Ilmu Komputer Cipta Karya Informatika, East Jakarta City, Special Capital Region of Jakarta, Indonesia.
Informatics Engineering Study Program, Sekolah Tinggi Ilmu Komputer Cipta Karya Informatika, East Jakarta City, Special Capital Region of Jakarta, Indonesia.
How to Cite
License & Copyright
This work is licensed under a Creative Commons Attribution 4.0 International License.
This is an open-access journal. All articles are distributed under the terms of the Creative Commons Attribution 4.0 International License (CC BY 4.0), which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.
Creative Commons Attribution 4.0 International (CC BY 4.0)Under this license, you are free to:
- Share: copy, distribute, and transmit the work in any medium or format.
- Adapt: remix, transform, and build upon the work for any purpose, even commercially.
You must give appropriate credit, provide a link to the license, and indicate if changes were made. You may do so in any reasonable manner, but not in any way that suggests the licensor endorses you or your use.
Copyright and Retention Copyright & Retention Authors retain copyright without restrictions and grant this journal the right of first publication under an open-access model. The journal retains non-exclusive publishing rights for archiving, indexing, and scholarly dissemination.References
Total: 30 References- Aditya, R., & Ramadhan, D. (2022). Penerapan keamanan jaringan Virtual Private Cloud (VPC) menggunakan firewall rule dan access control list. Jurnal Teknologi dan Sistem Komputer, 10(2), 135–142. https://doi.org/10.14710/jtsiskom.10.2.135-142
- Afriansyah, A., & Huda, N. (2023). Implementasi CloudTrail dan CloudWatch untuk deteksi ancaman siber pada infrastruktur AWS. Jurnal Teknologi Informasi dan Ilmu Komputer, 11(1), 55–62. https://doi.org/10.14710/jtik.11.1.55-62
- Alavizadeh, H., Aref, S., Kim, D. S., & Jang-Jaccard, J. (2020). Evaluating the security and economic effects of moving target defense techniques on the cloud. arXiv. https://doi.org/10.48550/arXiv.2009.02030
- Amazon Web Services. (2023). Amazon VPC documentation. https://docs.aws.amazon.com/vpc
- Amazon Web Services. (2023). AWS identity and access management user guide. https://docs.aws.amazon.com/IAM/latest/UserGuide
Similar Articles
Explore related articles published in this journal.
Web-Based Network Anomaly Detection System for Disaster Recovery Center: A SIEM Implementation at the Indonesian Attorney General Training Agency
Real-Time Face Recognition System with Enhanced Security Using Cryptographic Hash-Based Encrypted Embedding Matching
Implementation of Edge Computing for Optimizing Sensor Data Collection in Smart Buildings
Security Analysis of Midtrans Payment Gateway API against DDoS Attack and Rate Limiting Technique Using Node.js
Pengembangan Sistem Informasi Penggajian Guru Diniyah Berbasis Web: Studi Kasus Dinas Pendidikan dan Kebudayaan Kota Banda Aceh
Most read articles by the same author(s)
Explore other articles by these authors.