【Design Guideline】Summary of Design Considerations for AWS

Created date: 2025/05/11, Update date: 2025/06/19

In this blog, we summarize the considerations that should be taken into account when building an AWS environment as "Design Guidelines."

Table of Contents

What is a “Design Guideline”?
Standardization Guideline
Account Design
Identity and Access Management
Detective Controls
Network Design / Infrastructure Protection
Data Protection / Log Management
Operations Management

What is a “Design Guideline”?

When developing systems on AWS, the typical workflow includes requirements definition, basic design, detailed design, implementation, testing, and operations.
Standardizing IT environments and operations throughout system development enhances both efficiency and quality.
In AWS, building multi-account environments within organizations has become common practice. Leveraging standardized AWS services in these environments further improves development efficiency and quality.
Establishing a “Standardization Guideline” as part of multi-account environment planning, along with defining design and operational principles, is essential.
In this blog, a “Design Guideline” refers to the key considerations during the requirements definition and basic design phases of system development, as well as important points for creating a “Standardization Guideline.”
The “Design Guidelines” for each AWS service are organized according to the <Example Chapter Structure of Guidelines> described in Best Practices for Formulating AWS Standardization Guidelines | Amazon Web Services Blog .
Note: The related materials linked above are written in Japanese.
The “Design Guidelines” for each AWS service detail the considerations for the requirements definition and basic design phases, as well as key points for formulating a “Standardization Guideline.”
- However, for categories such as “Network Design and Infrastructure Protection” and “Data Protection and Log Management,” it is more practical to address these topics together, so they are not separated in these guidelines.

Standardization Guideline

【Design Guideline】Summary of Design Considerations for AWS

In this blog, we summarize the considerations that should be taken into account when building an AWS ... [Read more]

Account Design

【Design Guideline】Considerations for Introducing AWS Control Tower to Corporate Structure/Systems

As part of security measures for AWS environments in organizations, it has become common to establis ... [Read more]

【Guidelines】Considerations for Introducing AWS Organizations to Corporate Structure/Systems

When building an AWS environment, it has become common to use a multi-account structure to separate ... [Read more]

Identity and Access Management

【Guidelines】Considerations for Introducing AWS IAM / AWS IAM Identity Center to Corporate Organizations/Systems

AWS IAM Identity Center is a service for centrally managing authentication and authorization of user ... [Read more]

Detective Controls

【Guidelines】Considerations for Introducing AWS CloudTrail to Corporate Organizations/Systems

AWS CloudTrail is a service that monitors activities in your AWS account. When implementing security ... [Read more]

【Guidelines】Consideration for introducing Amazon GuardDuty to Corporate Organization/System

Amazon GuardDuty is a service that monitors and threats activities in the AWS account. In this artic ... [Read more]

【Guidelines】Consideration for introducing AWS Config to Corporate Organization/System

AWS Config is a service that allows you to manage configuration and record changes for AWS resources ... [Read more]

Network Design / Infrastructure Protection

【Guidelines】Considerations for Introducing Amazon VPC to Corporate Organizations/Systems

Amazon VPC is a service for building a virtual private cloud within the AWS cloud. By using VPC, you ... [Read more]

Data Protection / Log Management

Under preparation.

Operations Management

Thorough explanation of the aws:executeScript action for SSM Automation

SSM automation can execute Python or PowerShell script by using aws:executeScript action. When autom ... [Read more]