Amazon WorkMail | Security Flashcards
Is there any additional charge for defining email flow rules?
Security
Amazon WorkMail | Business Productivity
No, there is no additional charge for using email flow rules.
How is data transmitted to Amazon WorkMail?
Security
Amazon WorkMail | Business Productivity
All data in transit is encrypted using industry-standard SSL. Our web application, and mobile and desktop clients transmit data to Amazon WorkMail using SSL.
Can I choose the AWS region where my data is stored?
Security
Amazon WorkMail | Business Productivity
Yes. You choose the AWS region where your organization’s data is stored. Please refer to the Regional Products and Services page for details of Amazon WorkMail availability by region.
How do I decide which AWS region to use?
Security
Amazon WorkMail | Business Productivity
There are several factors to consider, based on your needs, including whether using a specific AWS region enables you to meet regulatory and compliance requirements. We generally recommend that you set up your Amazon WorkMail organization in the region nearest to where most of your users are located, to reduce data access latencies.
How is Amazon WorkMail protected from malware/viruses?
Security
Amazon WorkMail | Business Productivity
Amazon WorkMail scans all incoming and outgoing email for spam, malware, and viruses to help protect customers from malicious email.
Does Amazon WorkMail offer support for mobile device policies, to protect data stored on mobile devices?
Security
Amazon WorkMail | Business Productivity
Yes. Amazon WorkMail gives you the ability to require a PIN or password on your users’ devices, configure the password strength, require a device lock after a number of failed login attempts, require a screen lock for idle timeouts, and require device and storage card encryption.
How can I manage my encryption key used for the data encryption in Amazon WorkMail?
Security
Amazon WorkMail | Business Productivity
Amazon WorkMail is integrated with Amazon Key Management Service for the encryption of your data. Key management can be performed from the Amazon IAM console. For more information about AWS Key Management Service, please see Amazon AWS Key Management developer guide.
What data is encrypted with my encryption keys?
Security
Amazon WorkMail | Business Productivity
All email content, attachments, and metadata for a mailbox is encrypted using the customer-managed keys of that user’s organization.
Is my email encrypted when using the IMAP protocol to access my Amazon WorkMail mailbox?
Security
Amazon WorkMail | Business Productivity
Yes. All email communication is encrypted in transit by the secure connections made between the client and the server, and all email stored in Amazon WorkMail is encrypted at rest.
Does Amazon WorkMail support S/MIME for signing and encrypting email?
Security
Amazon WorkMail | Business Productivity
Yes. Amazon WorkMail supports S/MIME signing and encryption in the Microsoft Outlook client and certain mobile devices like Apple iPhone and iPad. The Amazon WorkMail web application currently does not support S/MIME signing and encryption.
What compliance certifications does Amazon WorkMail support?
Security
Amazon WorkMail | Business Productivity
Amazon Web Services has achieved the ISO 27001, ISO 27017 and ISO 27018 certifications. Amazon WorkMail regions in US East (N.Virginia), US West (Oregon) and EU (Ireland) are within the scope of the certifications. You can learn more about these certifications on the AWS Cloud Compliance section of the website.
You can also request a copy of the Service Organization Controls (SOC) report available from AWS Compliance to learn more about the security controls AWS uses to protect your data.
