Reference
Public Cloud Infrastructure glossary
Terms used in Public Cloud Infrastructure and its documentation.
Applies to Public Cloud Infrastructure as it works today. Moraph updates the platform continuously, and this page is reviewed when it changes.
Terms used in Public Cloud Infrastructure and its documentation.
| Term | Meaning |
|---|---|
| Landing zone | The set of AWS accounts, policies and shared services that every workload is built on. |
| Guardrail | A rule in the baseline that either prevents an action or detects a configuration that breaks it. |
| Service control policy | An AWS Organizations policy that blocks actions in every account it applies to, whatever permissions people hold. |
| Policy as code | Guardrails written as versioned code, reviewed and tested like any other change. |
| Drift | A resource's configuration moving away from the approved baseline after deployment. |
| Account vending | Creating a new AWS account from a request with the baseline already applied. |
| Permission set | A set of AWS permissions in IAM Identity Center assigned to a group for one or more accounts. |
| Exception | An approved deviation from a guardrail, recorded with its reason, compensating control, approver and review date. |
| Break-glass access | An emergency route into an account used when normal access is unavailable, authorized and recorded. |
| Finding | A possible security issue reported by GuardDuty, Security Hub or another AWS detection service. |
Was this page helpful?
Report a problem with this page
Need help with your own setup rather than this page? Raise a support ticket.