Drupal Security Concerns: Understanding the Shared Responsibility Model

When it comes to maintaining the high level of security Amazon provides, there are certain aspects that remain undisclosed to the public due to their sensitive nature. This includes network topology, physical locations, and AWS-specific security procedures. Additionally, Amazon personnel do not have logical access to Cloud Platform hosts or applications, nor can they access the data of any Cloud Platform subscribers hosted by Cloud Platform.

As a subscriber, it is your responsibility to ensure the security controls deployed to your Drupal application are in line with the risk and mission of the application. This means addressing security during the development lifecycle, following secure development best practices, and conducting security testing as part of the change process. Furthermore, you must also address risk and compliance requirements, which correlate to the importance and sensitivity of the data.

Before deploying your Drupal application, it is crucial to understand what data you intend to collect and store in your application. As a Cloud Platform subscriber, you have various responsibilities around the security of the applications you host with us. Acquia provides tools, support, and resources enabling you to keep secure Drupal applications.

We manage, monitor, and secure the environment where your applications run, including the operating system and LAMP (Linux, Apache, MySQL, PHP) stack and network layers of Cloud Platform. Our platform provides a secure environment where you can build and manage world-class, highly secure Drupal applications.

At Acquia, we believe in a shared responsibility model when it comes to security. This means that security is not just the responsibility of one party, but rather it is a collaborative effort between Acquia, Amazon Web Services, and our subscribers. By working together, we can ensure that your Drupal application is secure and compliant with relevant regulations.

For more information about Cloud Platform's compliance standards and regulations, please see our Compliance with Standards and Regulations page.

Drupal security concerns