:_mod-docs-content-type: ASSEMBLY
include::_attributes/attributes-openshift-dedicated.adoc[]
:context: rosa-policy-process-security
[id="rosa-policy-process-security"]
= Understanding security for {product-title}

toc::[]

[role="_abstract"]
This document details the Red{nbsp}Hat, Amazon Web Services (AWS), and customer security responsibilities for the managed {product-title}.

.Acronyms and terms
[cols="1,3a"]
|===
| Acroynm | Definition
|*AWS*
|Amazon Web Services
|* *CEE*
|Customer Experience and Engagement (Red{nbsp}Hat Support)
|* *CI/CD*
|Continuous Integration / Continuous Delivery
|* *CVE*
|Common Vulnerabilities and Exposures
|* *PVs*
|Persistent Volumes
|* *SRE*
|Red{nbsp}Hat Site Reliability Engineering
|* *VPC*
|Virtual Private Cloud
|===

include::modules/rosa-policy-security-regulation-compliance.adoc[leveloffset=+1]

[role="_additional-resources"]
.Additional resources

* link:https://access.redhat.com/articles/5528091[Red{nbsp}Hat Subprocessor List]
* xref:../../rosa_architecture/rosa_policy_service_definition/rosa-policy-responsibility-matrix.adoc#rosa-policy-responsibilities_rosa-policy-responsibility-matrix[ROSA Responsibilities]

ifndef::openshift-rosa-hcp[]
* xref:../../rosa_architecture/rosa_policy_service_definition/rosa-service-definition.adoc#rosa-service-definition[ROSA Service Definition]
* xref:../../security/audit-log-view.adoc#audit-log-view[Viewing audit logs]
endif::openshift-rosa-hcp[]
ifdef::openshift-rosa-hcp[]
* xref:../../rosa_architecture/rosa_policy_service_definition/rosa-hcp-service-definition.adoc#rosa-hcp-service-definition[ROSA with HCP Service Definition]
* xref:../../security/rosa-adding-additional-constraints-for-ip-based-aws-role-assumption.adoc#rosa-adding-additional-constraints-for-ip-based-aws-role-assumption[Adding additional constraints for IP-based AWS role assumption]
endif::openshift-rosa-hcp[]
