This paper examines the topic of logical separation for customers using Amazon Web Services (AWS). The paper discusses using a multi-pronged approach — for example, leveraging virtualization, encryption, and programmatic policies — to build logical security mechanisms that meet and often exceed the security results of physical separation and other on-premises security approaches. Public sector and commercial organizations worldwide can leverage these mechanisms to more confidently migrate sensitive workloads to the cloud without the need for physically dedicated infrastructure.
