Sophos UTM on AWS has been designed with AWSClosed Cloud Architecture and AWS Security Best Practice Guidance in mind. Our aim is to help customers with their AWS Shared Security responsibilities and to conform to AWS recommendations on designing fault tolerant and scalable Cloud architectures. Full guidance on AWS Architecture and Cloud security is out of scope for this document, but AWS provides very detailed information on its own sites:

The goal of this document is to help customers quickly deploy and configure Sophos UTM on AWS.