# Resources
<a name="resources-1"></a>

 Refer to the following resources to learn more about our best practices for security. 

 **Documentation and blogs** 
+  [Isolating SaaS Tenants with Dynamically Generated IAM Policies](https://aws.amazon.com/blogs/apn/isolating-saas-tenants-with-dynamically-generated-iam-policies/) 
+  [Partitioning Pooled Multi-Tenant SaaS Data with Amazon DynamoDB](https://aws.amazon.com/blogs/apn/partitioning-pooled-multi-tenant-saas-data-with-amazon-dynamodb/) 
+  [Multi-tenant data isolation with PostgreSQL Row Level Security](https://aws.amazon.com/blogs/database/multi-tenant-data-isolation-with-postgresql-row-level-security/) 
+  [Identity Federation and SSO for SaaS on AWS](https://aws.amazon.com/blogs/apn/identity-federation-and-sso-for-saas-on-aws/) 
+  [Managing SaaS Identity Through Custom Attributes and Amazon Cognito](https://aws.amazon.com/blogs/apn/managing-saas-identity-through-custom-attributes-and-amazon-cognito/) 
+  [Onboarding and Managing Agents in a SaaS Solution](https://aws.amazon.com/blogs/apn/onboarding-and-managing-agents-in-a-saas-solution/) 
+  [Amazon Cognito API Reference](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AddCustomAttributes.html) 
+  [Building Serverless SaaS with Lambda layers](https://github.com/aws-samples/aws-serverless-saas-layers) (GitHub) 
+  [Modeling SaaS Tenant Profiles on AWS](https://aws.amazon.com/blogs/apn/modeling-saas-tenant-profiles-on-aws/) 

 **Whitepapers** 
+ [SaaS Tenant Isolation Strategies whitepaper](https://docs.aws.amazon.com/whitepapers/latest/saas-tenant-isolation-strategies/saas-tenant-isolation-strategies.html) 
+  [SaaS Storage Strategies whitepaper](https://docs.aws.amazon.com/whitepapers/latest/multi-tenant-saas-storage-strategies/multi-tenant-saas-storage-strategies.html) 

 **Videos** 
+  [AWS re:Invent 2017: SaaS and OpenID Connect: The Secret Sauce of Multi-Tenant Identity](https://youtu.be/jnFZGX2_T9U) 
+  [AWS re:Invent 2016: The Secret to SaaS (Hint: It's Identity)](https://www.youtube.com/watch?v=mi2whB6rIlw&list=PL4gOMYuwtVJsOA06mbpSuF6NxXersZWCB&index=6&t=10s) 
+  [AWS re:Invent 2019: SaaS tenant isolation patterns](https://www.youtube.com/watch?v=fuDZq-EspNA)