Cross-Domain Solutions on AWS

Publication date: February 2, 2021 (Document history)

Abstract

Many corporations, government entities, and institutions maintain multiple security domains as part of their information technology (IT) infrastructure. For the purposes of this document, a security domain is an environment with a set of resources accessible only by users or entities who have permitted access to those resources. The resources are likely to include the resource network fabric, as defined by the security domain’s policy.

Some organizations’ users need to interact with multiple domains simultaneously. Or a system or user within one security domain needs to communicate directly or obtain data from a system or user in a separate security domain. For security domains with highly sensitive data, organizations can deploy a cross-domain solution (CDS) to allow data transfer between security domains while also helping to ensure the integrity of the domain’s security perimeter.