Even if you’ve already built your cloud environment some of these items can be implemented without massive retooling, others may require parallel build and migrate actions. The biggest thing I want to emphasize before we jump in is that taking the time to plan and architect a secure and well designed private cloud will go a long ways to preventing future issues. The primary focus of this blog post will be on Amazon AWS environments, however the same concepts apply to other IaaS platforms and on premise datacenters. Some of the topics we’ll go over in this post may be old news to those of you who are already security conscious and some of them may even seem like common sense, but it can be surprising how often the simple things are ignored or assumed leading to unnecessary vulnerabilities. While this blog post is not intended to make your infrastructure an impenetrable fortress that keeps all the bad guys out, because despite best efforts it's impossible to protect against everything, this is intended to lay down some best practices surrounding security in a cloud environment. On the other side of this organizations have limited budgets, tight deadlines to meet, and increasing demand to deliver newer, better, and faster services with higher expectations regarding disaster recovery and high availability. The unfortunate juxtaposition of this is that those perpetrating cyber attacks have little to lose and don’t have much at stake. The fact of the matter is no one wants to end up in this position and there are tons of bad actors on the internet that have malicious intent.Ĭyber attacks have become more and more prevalent over the past few years, whether this be in the form of the more traditional trojan horses and phishing, or through man in the middle exploits (see the numerous OpenSSL vulnerabilities (HeartBleed, POODLE, etc), to distributed denial of service attacks (dDOS), cross site scripting, SQL injection, and ransomware (cryptolocker). We’ve all seen the horror stories in the news when companies experience data security breaches. Whether you’re running on premise datacenter, using a private or public IaaS (Infrastructure as a Service) hosting platform, security is extremely important.
0 kommentar(er)
