Security
Platform Security Practices
Security controls are applied across customer accounts, AWS environment boundaries, network paths, credentials, edge traffic, deployment operations, and monitoring.
Identity and secrets
Customer accounts support two-factor authentication, while submitted private repository credentials are stored securely and are not displayed again.
- 2FA support
- Secure secret storage
- No credential disclosure in documentation or support artifacts
Environment and network boundaries
Beta and Production use separate AWS accounts, and non-edge infrastructure remains in private network segments.
- AWS account isolation
- Private subnets
- Controlled service-to-service access
Edge and operational safeguards
CloudFront, TLS, AWS WAF, logging, alarms, and controlled deployment workflows provide additional layers around the application.
- Encrypted public traffic
- Web request filtering
- Operational logging and alerting