http://docs.aws.amazon.com/en_us/prescriptive-guidance/latest/security-reference-architecture/welcome.html