https://docs.aws.amazon.com/whitepapers/latest/security-desi... seems like the relevant docs?