Two Practical Examples Of Modern Cloud SecOps
Security Boulevard, Monday, February 5th, 2024
We started this series detailing the major ways cloud affects SecOps before delving into updating our core capabilities and processes to better manage the cloud. Now it's time to show some practical examples, both of which we have implemented in the real world
Example One: Misconfiguration Remediation
Your tooling finds an S3 bucket that is open to public internet access. This is in an account that does have other public buckets, but this one is unexpected. It's similar to finding a new open file share or SharePoint site that isn't a clear policy violation but is definitely concerning, especially since data may be exposed to the internet.
Your objective is to detect, analyze and respond as quickly as possible.