The main motivation for writing this whitepaper was to demystify security and compliance to interested newcomers and provide foundational knowledge of common terminology and techniques used within this field. It takes the reader from theory to practice using a simplistic fictional case study and attempts to answer many of the common Amazon Web Services (AWS) security and compliance questions organisations have and demystify the inter-relationship between security and compliance process and technology.