{"id":219147,"date":"2019-04-17T11:04:18","date_gmt":"2019-04-17T09:04:18","guid":{"rendered":"https:\/\/www.intrinsec.com\/?p=219147"},"modified":"2019-04-17T11:04:18","modified_gmt":"2019-04-17T09:04:18","slug":"audit-de-securite-aws","status":"publish","type":"post","link":"https:\/\/www.intrinsec.com\/en\/audit-de-securite-aws\/","title":{"rendered":"AWS Environment Security Audit"},"content":{"rendered":"<p>[et_pb_section fb_built=&quot;1&quot; admin_label=&quot;section&quot; _builder_version=&quot;3.22.3&quot; fb_built=&quot;1&quot; _i=&quot;0&quot; _address=&quot;0&quot;][et_pb_row _builder_version=&quot;3.25&quot; _i=&quot;0&quot; _address=&quot;0.0&quot;][et_pb_column type=&quot;4_4&quot; _builder_version=&quot;3.25&quot; custom_padding=&quot;|||&quot; _i=&quot;0&quot; _address=&quot;0.0.0&quot; custom_padding__hover=&quot;|||&quot;][et_pb_image src=&quot;https:\/\/www.intrinsec.com\/wp-content\/uploads\/2019\/04\/aws-3.png&quot; align_tablet=&quot;center&quot; align_last_edited=&quot;on|desktop&quot; _builder_version=&quot;3.23&quot; width=&quot;54%&quot; module_alignment=&quot;center&quot; _i=&quot;0&quot; _address=&quot;0.0.0.0&quot;][\/et_pb_image][\/et_pb_column][\/et_pb_row][et_pb_row admin_label=&quot;row&quot; _builder_version=&quot;3.25&quot; background_size=&quot;initial&quot; background_position=&quot;top_left&quot; background_repeat=&quot;repeat&quot; _i=&quot;1&quot; _address=&quot;0.1&quot;][et_pb_column type=&quot;4_4&quot; _builder_version=&quot;3.25&quot; custom_padding=&quot;|||&quot; _i=&quot;0&quot; _address=&quot;0.1.0&quot; custom_padding__hover=&quot;|||&quot;][et_pb_text admin_label=&quot;Text&quot; _builder_version=&quot;3.27.4&quot; text_font=&quot;||||||||&quot; background_size=&quot;initial&quot; background_position=&quot;top_left&quot; background_repeat=&quot;repeat&quot; min_height=&quot;1295px&quot; custom_padding=&quot;||0px|||&quot; _i=&quot;0&quot; _address=&quot;0.1.0.0&quot;]<\/p>\n<h3 style=\"text-align: center;\">Interview d\u2019<strong>Adrien Bouteiller<\/strong>, consultant s\u00e9curit\u00e9 chez Intrinsec<\/h3>\n<p>&nbsp;<\/p>\n<h4><span style=\"color: #ff0000;\"><em><strong>Bonjour Adrien. Peux-tu nous pr\u00e9senter l\u2019offre \u201cAudit d\u2019environnement AWS\u201d ?<\/strong><\/em><\/span><\/h4>\n<p><strong>Adrien :<\/strong> Il faut voir un environnement <a href=\"https:\/\/aws.amazon.com\/fr\/\" target=\"_blank\" rel=\"noopener noreferrer\">Amazon Web Services (AWS)<\/a> comme une composition de nombreux services de constitutions et de natures tr\u00e8s vari\u00e9es.<\/p>\n<p>AWS propose des gestionnaires de bases de donn\u00e9es, des solutions de stockage, ou encore des services permettant d\u2019\u00e9tablir un lien avec une infrastructure physique. Mais, ce qui nous int\u00e9resse particuli\u00e8rement, ce sont les services de s\u00e9curit\u00e9. Pour n\u2019en citer que trois, nous avons :<\/p>\n<ul>\n<li><strong>Identity and Access Management (IAM)<\/strong>, qui permet notamment de d\u00e9finir des permissions et de contr\u00f4ler les acc\u00e8s aux diff\u00e9rentes ressources ;<\/li>\n<li><strong>Key Management System (KMS)<\/strong>, un gestionnaire de cl\u00e9s de chiffrement utilis\u00e9 par de nombreux autre services ;<\/li>\n<li><strong>CloudTrial, CloudWatch et GuardDuty<\/strong>, une suite de journalisation, de surveillance et de d\u00e9tection d\u2019intrusion.<\/li>\n<\/ul>\n<p>Ce que nous proposons, dans notre <a href=\"https:\/\/www.intrinsec.com\/audit-securite\/\" target=\"_blank\" rel=\"noopener noreferrer\">d\u00e9marche d\u2019audit<\/a>, c\u2019est d<strong>\u2019\u00e9valuer le niveau de s\u00e9curit\u00e9 d\u2019un environnement AWS<\/strong>, au travers de <strong>l\u2019analyse de la configuration <\/strong>des diff\u00e9rents services impliqu\u00e9s\u00a0<strong>et de son architecture<\/strong>. L\u2019objectif de ce travail est de r\u00e9pondre aux deux questions suivantes :<\/p>\n<ul>\n<li>Un <strong>attaquant ext\u00e9rieur<\/strong> peut-il <strong>s\u2019introduire<\/strong> dans l\u2019environnement ?<\/li>\n<li>Un collaborateur ou prestataire malveillant peut-il <strong>\u00e9lever ses privil\u00e8ges<\/strong>, ou bien <strong>acc\u00e9der de mani\u00e8re ill\u00e9gitime \u00e0 des ressources sensibles<\/strong> de l\u2019environnement ?<\/li>\n<\/ul>\n<p>Nous r\u00e9alisons \u00e9galement une <strong>\u00e9tude de conformit\u00e9<\/strong>, en analysant la coh\u00e9rence entre la configuration effective de l&rsquo;environnement et les exigences d\u00e9finies dans la politique de s\u00e9curit\u00e9 de l&rsquo;entreprise.\u00a0Cette approche int\u00e8gre des composantes organisationnelles, au travers d&rsquo;entretiens avec les \u00e9quipes en charge de l&rsquo;infrastructure.<\/p>\n<p>En compl\u00e9ment, nous \u00e9tablissons des <strong>pr\u00e9conisations concr\u00e8tes, adapt\u00e9es et prioris\u00e9es<\/strong>, dans le but d\u2019\u00e9tablir un plan d\u2019action \u00e0 court et \u00e0 moyen terme.<\/p>\n<p>&nbsp;<\/p>\n<h4><span style=\"color: #ff0000;\"><em><strong>Sur quel type d\u2019environnement intervenons-nous ?<\/strong><\/em><\/span><\/h4>\n<p><strong>Adrien :<\/strong> En entreprise, nous rencontrons \u00e0 la fois des environnements de faible \u00e9tendue, centr\u00e9s autour d\u2019une<strong> infrastructure r\u00e9seau de type \u00ab h\u00e9bergement Web \u00bb<\/strong>, et des environnements bien plus vastes, incluant une partie du<strong> syst\u00e8me d\u2019information de l\u2019entreprise<\/strong> et exploitant de nombreux services AWS.<\/p>\n<p>Cette partition est tr\u00e8s g\u00e9n\u00e9rique et admet sans doute quelques singularit\u00e9s, mais permet tout de m\u00eame de distinguer les deux grandes familles observables.<\/p>\n<p>Nous intervenons le plus souvent sur des infrastructures de type \u00ab h\u00e9bergement Web \u00bb, mais avons aussi l\u2019occasion, bien que cela soit plus rare, de travailler sur des environnements de plus grande envergure.<\/p>\n<p>&nbsp;<\/p>\n<h4><em><span style=\"color: #ff0000;\"><strong>Pourquoi avoir imagin\u00e9 cette offre ? Quelle est la valeur ajout\u00e9e de la conduite de ce type d\u2019audit pour une entreprise ?<\/strong><\/span><\/em><\/h4>\n<p><strong>Adrien :<\/strong> Sans surprise, c\u2019est <strong>la croissance du march\u00e9 des cloud providers<\/strong> qui nous a amen\u00e9s \u00e0 nous int\u00e9resser \u00e0 ce sujet.<\/p>\n<blockquote>\n<p><em>\u00ab By 2020, a corporate no-cloud policy will be as rare as a no-internet policy is today \u00bb\u00a0<\/em><\/p>\n<p><strong><em>Gartner Inc.<\/em><\/strong><\/p>\n<\/blockquote>\n<p>En effet, il est courant de voir des entreprises faire le choix de positionner une partie de leur infrastructure chez AWS ou chez un concurrent, notamment pour des raisons de flexibilit\u00e9. Malgr\u00e9 tous les avantages que pr\u00e9sente cette pratique, un inconv\u00e9nient majeur persiste : la grande complexit\u00e9 des services propos\u00e9s.<\/p>\n<p>Chacun le sait : la s\u00e9curit\u00e9 est un m\u00e9tier. Nous avons donc consid\u00e9r\u00e9 qu\u2019il \u00e9tait n\u00e9cessaire de construire notre expertise sur le sujet, afin <strong>d\u2019accompagner nos clients dans cette transition<\/strong> et de leur permettre d<strong>\u2019exploiter tout le potentiel de l\u2019offre de services orient\u00e9s s\u00e9curit\u00e9<\/strong> d\u2019AWS.<\/p>\n<p>&nbsp;<\/p>\n<h4><span style=\"color: #ff0000;\"><em><strong>Quelles sont les perspectives d\u2019\u00e9volution ?<\/strong><\/em><\/span><\/h4>\n<p><strong>Adrien :<\/strong> Aujourd\u2019hui, nous avons essentiellement une approche offensive de la s\u00e9curit\u00e9 des environnements AWS. Nous pr\u00e9voyons, tout au long de ces prochains mois, d\u2019\u00e9tendre notre champ de comp\u00e9tences aux aspects d\u00e9fensifs. Notre <a href=\"https:\/\/www.intrinsec.com\/soc-securite-operationnelle\/\" target=\"_blank\" rel=\"noopener noreferrer\">SOC<\/a> et notre <a href=\"https:\/\/www.intrinsec.com\/cert-intrinsec\/\" target=\"_blank\" rel=\"noopener noreferrer\">CERT<\/a> engagent actuellement des cycles de recherche et d\u00e9veloppement qui vont dans ce sens, et auront sans doute l\u2019occasion de communiquer prochainement sur leurs activit\u00e9s.<\/p>\n<p>Sur un plan plus formel, nous disposons \u00e0 ce jour de <strong>deux certifications<\/strong> : la<a href=\"https:\/\/aws.amazon.com\/fr\/certification\/certified-solutions-architect-associate\/%20\" target=\"_blank\" rel=\"noopener noreferrer\"> certification Solutions Architect Associate<\/a>, qui justifie une compr\u00e9hension globale des services AWS, et la <a href=\"https:\/\/aws.amazon.com\/fr\/certification\/certified-security-specialty\/ \" target=\"_blank\" rel=\"noopener noreferrer\">certification Security Specialty<\/a>, qui traite en profondeur des sujets li\u00e9s \u00e0 la s\u00e9curit\u00e9. Nous pr\u00e9voyons de passer d\u2019autres certifications plus fonctionnelles, notamment dans le but de comprendre davantage les contraintes m\u00e9tier propres \u00e0 AWS.<\/p>\n<p>Enfin, dans une perspective plus large, nous souhaitons \u00e9tendre notre activit\u00e9 aux autres principaux fournisseurs de cloud computing (\u00e0 savoir Microsoft Azure et Google Cloud Plateform), \u00e0 l\u2019horizon 2020.<\/p>\n<p>&nbsp;<\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=&quot;3.25&quot; min_height=&quot;72px&quot; _i=&quot;2&quot; _address=&quot;0.2&quot;][et_pb_column type=&quot;4_4&quot; _builder_version=&quot;3.25&quot; custom_padding=&quot;|||&quot; _i=&quot;0&quot; _address=&quot;0.2.0&quot; custom_padding__hover=&quot;|||&quot;][et_pb_button button_url=&quot;https:\/\/www.intrinsec.com\/contactez-nous\/&quot; url_new_window=&quot;on&quot; button_text=&quot;Contactez-nous pour d\u00e9couvrir notre solution&quot; button_alignment=&quot;center&quot; _builder_version=&quot;3.22.1&quot; custom_button=&quot;on&quot; button_text_color=&quot;#ffffff&quot; button_font=&quot;Raleway||||||||&quot; button_use_icon=&quot;off&quot; button_text_size_phone=&quot;17px&quot; button_text_size_last_edited=&quot;on|phone&quot; custom_css_main_element=&quot; padding: 0.4vw 2.0vw!important;||&quot; button_text_color_hover=&quot;#c41718&quot; button_border_color_hover=&quot;#c41718&quot; button_bg_color_hover=&quot;#ffffff&quot; button_text_size__hover_enabled=&quot;off&quot; button_one_text_size__hover_enabled=&quot;off&quot; button_two_text_size__hover_enabled=&quot;off&quot; button_text_color__hover_enabled=&quot;on&quot; button_text_color__hover=&quot;#c41718&quot; button_one_text_color__hover_enabled=&quot;off&quot; button_two_text_color__hover_enabled=&quot;off&quot; button_border_width__hover_enabled=&quot;off&quot; button_one_border_width__hover_enabled=&quot;off&quot; button_two_border_width__hover_enabled=&quot;off&quot; button_border_color__hover_enabled=&quot;on&quot; button_border_color__hover=&quot;#c41718&quot; button_one_border_color__hover_enabled=&quot;off&quot; button_two_border_color__hover_enabled=&quot;off&quot; button_border_radius__hover_enabled=&quot;off&quot; button_one_border_radius__hover_enabled=&quot;off&quot; button_two_border_radius__hover_enabled=&quot;off&quot; button_letter_spacing__hover_enabled=&quot;off&quot; button_one_letter_spacing__hover_enabled=&quot;off&quot; button_two_letter_spacing__hover_enabled=&quot;off&quot; button_bg_color__hover_enabled=&quot;on&quot; button_bg_color__hover=&quot;#ffffff&quot; button_one_bg_color__hover_enabled=&quot;off&quot; button_two_bg_color__hover_enabled=&quot;off&quot; _i=&quot;0&quot; _address=&quot;0.2.0.0&quot;] \u00a0 [\/et_pb_button][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"<p>[et_pb_section fb_built=&quot;1&quot; admin_label=&quot;section&quot; _builder_version=&quot;3.22.3&quot; fb_built=&quot;1&quot; _i=&quot;0&quot; _address=&quot;0&quot;][et_pb_row _builder_version=&quot;3.25&quot; _i=&quot;0&quot; _address=&quot;0.0&quot;][et_pb_column type=&quot;4_4&quot; _builder_version=&quot;3.25&quot; custom_padding=&quot;|||&quot; _i=&quot;0&quot; _address=&quot;0.0.0&quot; [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13],"tags":[],"class_list":["post-219147","post","type-post","status-publish","format-standard","hentry","category-evaluation-securite"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.0 (Yoast SEO v28.1) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Audit de s\u00e9curit\u00e9 des environnements AWS - INTRINSEC<\/title>\n<meta name=\"description\" content=\"Vous utilisez la plateforme de services AWS et vous souhaiteriez \u00eatre accompagn\u00e9 pour la s\u00e9curisation de votre environnement ? D\u00e9couvrez notre article.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.intrinsec.com\/en\/audit-de-securite-aws\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Audit de s\u00e9curit\u00e9 des environnements AWS\" \/>\n<meta property=\"og:description\" content=\"Vous utilisez la plateforme de services AWS et vous souhaiteriez \u00eatre accompagn\u00e9 pour la s\u00e9curisation de votre environnement ? D\u00e9couvrez notre article.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.intrinsec.com\/en\/audit-de-securite-aws\/\" \/>\n<meta property=\"og:site_name\" content=\"INTRINSEC\" \/>\n<meta property=\"article:published_time\" content=\"2019-04-17T09:04:18+00:00\" \/>\n<meta name=\"author\" content=\"Adrien Bouteiller\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@Intrinsec\" \/>\n<meta name=\"twitter:site\" content=\"@Intrinsec\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Adrien Bouteiller\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/audit-de-securite-aws\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/audit-de-securite-aws\\\/\"},\"author\":{\"name\":\"Adrien Bouteiller\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/person\\\/f66452546f5761d26bb4c6dfa4d9d1e6\"},\"headline\":\"Audit de s\u00e9curit\u00e9 des environnements AWS\",\"datePublished\":\"2019-04-17T09:04:18+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/audit-de-securite-aws\\\/\"},\"wordCount\":1387,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#organization\"},\"articleSection\":[\"S\u00e9curit\u00e9 offensive &amp; Audit\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.intrinsec.com\\\/audit-de-securite-aws\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/audit-de-securite-aws\\\/\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/audit-de-securite-aws\\\/\",\"name\":\"Audit de s\u00e9curit\u00e9 des environnements AWS - INTRINSEC\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#website\"},\"datePublished\":\"2019-04-17T09:04:18+00:00\",\"description\":\"Vous utilisez la plateforme de services AWS et vous souhaiteriez \u00eatre accompagn\u00e9 pour la s\u00e9curisation de votre environnement ? D\u00e9couvrez notre article.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/audit-de-securite-aws\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.intrinsec.com\\\/audit-de-securite-aws\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/audit-de-securite-aws\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/www.intrinsec.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Audit de s\u00e9curit\u00e9 des environnements AWS\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#website\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/\",\"name\":\"INTRINSEC\",\"description\":\"Notre m\u00e9tier , Prot\u00e9ger le v\u00f4tre\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.intrinsec.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#organization\",\"name\":\"INTRINSEC\",\"alternateName\":\"ISEC\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/wp-content\\\/uploads\\\/2025\\\/02\\\/libellule.png\",\"contentUrl\":\"https:\\\/\\\/www.intrinsec.com\\\/wp-content\\\/uploads\\\/2025\\\/02\\\/libellule.png\",\"width\":1322,\"height\":1322,\"caption\":\"INTRINSEC\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/Intrinsec\",\"https:\\\/\\\/fr.linkedin.com\\\/company\\\/intrinsec\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UC0trUZAHNZOUbxYnNdecM4A\"],\"description\":\"soci\u00e9t\u00e9 de consulting, pure player cybers\u00e9curit\u00e9 fran\u00e7ais et europ\u00e9en depuis plus de 30ans, sp\u00e9cialiste dans la s\u00e9curit\u00e9 offensive & audit (pentest\\\/red team), GRC, et services IMSS comme le SOC, CTI et CERT Intrinsec est qualifi\u00e9 PASSI Elev\u00e9, PRIS Elev\u00e9 et PACS par l'ANSSI\",\"email\":\"contact@intrinsec.com\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/person\\\/f66452546f5761d26bb4c6dfa4d9d1e6\",\"name\":\"Adrien Bouteiller\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=retro&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=retro&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=retro&r=g\",\"caption\":\"Adrien Bouteiller\"},\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/en\\\/author\\\/adrien-bouteiller\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"AWS Environment Security Audit - INTRINSEC","description":"Do you use the AWS service platform and would like support in securing your environment? Check out our article.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.intrinsec.com\/en\/audit-de-securite-aws\/","og_locale":"en_US","og_type":"article","og_title":"Audit de s\u00e9curit\u00e9 des environnements AWS","og_description":"Vous utilisez la plateforme de services AWS et vous souhaiteriez \u00eatre accompagn\u00e9 pour la s\u00e9curisation de votre environnement ? D\u00e9couvrez notre article.","og_url":"https:\/\/www.intrinsec.com\/en\/audit-de-securite-aws\/","og_site_name":"INTRINSEC","article_published_time":"2019-04-17T09:04:18+00:00","author":"Adrien Bouteiller","twitter_card":"summary_large_image","twitter_creator":"@Intrinsec","twitter_site":"@Intrinsec","twitter_misc":{"Written by":"Adrien Bouteiller","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.intrinsec.com\/audit-de-securite-aws\/#article","isPartOf":{"@id":"https:\/\/www.intrinsec.com\/audit-de-securite-aws\/"},"author":{"name":"Adrien Bouteiller","@id":"https:\/\/www.intrinsec.com\/#\/schema\/person\/f66452546f5761d26bb4c6dfa4d9d1e6"},"headline":"Audit de s\u00e9curit\u00e9 des environnements AWS","datePublished":"2019-04-17T09:04:18+00:00","mainEntityOfPage":{"@id":"https:\/\/www.intrinsec.com\/audit-de-securite-aws\/"},"wordCount":1387,"commentCount":0,"publisher":{"@id":"https:\/\/www.intrinsec.com\/#organization"},"articleSection":["S\u00e9curit\u00e9 offensive &amp; Audit"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.intrinsec.com\/audit-de-securite-aws\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.intrinsec.com\/audit-de-securite-aws\/","url":"https:\/\/www.intrinsec.com\/audit-de-securite-aws\/","name":"AWS Environment Security Audit - INTRINSEC","isPartOf":{"@id":"https:\/\/www.intrinsec.com\/#website"},"datePublished":"2019-04-17T09:04:18+00:00","description":"Do you use the AWS service platform and would like support in securing your environment? Check out our article.","breadcrumb":{"@id":"https:\/\/www.intrinsec.com\/audit-de-securite-aws\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.intrinsec.com\/audit-de-securite-aws\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.intrinsec.com\/audit-de-securite-aws\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.intrinsec.com\/"},{"@type":"ListItem","position":2,"name":"Audit de s\u00e9curit\u00e9 des environnements AWS"}]},{"@type":"WebSite","@id":"https:\/\/www.intrinsec.com\/#website","url":"https:\/\/www.intrinsec.com\/","name":"INTRINSEC","description":"Our job is to protect yours.","publisher":{"@id":"https:\/\/www.intrinsec.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.intrinsec.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.intrinsec.com\/#organization","name":"INTRINSEC","alternateName":"ISEC","url":"https:\/\/www.intrinsec.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.intrinsec.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/02\/libellule.png","contentUrl":"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/02\/libellule.png","width":1322,"height":1322,"caption":"INTRINSEC"},"image":{"@id":"https:\/\/www.intrinsec.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/Intrinsec","https:\/\/fr.linkedin.com\/company\/intrinsec","https:\/\/www.youtube.com\/channel\/UC0trUZAHNZOUbxYnNdecM4A"],"description":"Intrinsec, a consulting firm and pure-play French and European cybersecurity provider for over 30 years, specializes in offensive security and auditing (penetration testing\/red teams), GRC, and IMSS services such as SOC, CTI, and CERT. Intrinsec is qualified at PASSI High, PRIS High, and PACS levels by ANSSI.","email":"contact@intrinsec.com"},{"@type":"Person","@id":"https:\/\/www.intrinsec.com\/#\/schema\/person\/f66452546f5761d26bb4c6dfa4d9d1e6","name":"Adrien Bouteiller","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=retro&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=retro&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=retro&r=g","caption":"Adrien Bouteiller"},"url":"https:\/\/www.intrinsec.com\/en\/author\/adrien-bouteiller\/"}]}},"_links":{"self":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/posts\/219147","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/comments?post=219147"}],"version-history":[{"count":0,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/posts\/219147\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/media?parent=219147"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/categories?post=219147"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/tags?post=219147"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}