Challenge — Getting the right people involved during an incident is probably the most important factor in how fast the incident gets resolved. However, as cloud environments sprawl across multiple providers, accounts, subscriptions and as cloud providers add more services, tapping into the right resources can become a challenge. The events from…

Automate There is no shortage of cloud security compliance tools. Many, like Cloudaware, DivvyCloud, CloudHealth support all three leading cloud providers: AWS, GCE and Azure. These tools come shipped with compliance policies that will evaluate your cloud infrastructure against best practices laid out by the cloud providers themselves. Cloudaware supports CIS…

Increasing number of companies find themselves in the multi-cloud environment. Some get there intentionally by building cloud agnostic applications. Others, more frequently, simply inherit environments that are dispersed across multiple cloud providers such as AWS, GCP and Azure. Below is a list of tools that simplify deployment and management tasks…

Managing large GCP deployments is a challenging task because all GCP management APIs are project specific. Cloudaware CMDB is a nifty multi-cloud management tool. It not only supports GCP but also AWS, Azure. …

1. They are great to start with. CIS Foundation Benchmarks for Amazon Web Services, Microsoft Azure and Google Cloud Platform are indeed available for you to download. If you’re just getting started with cloud security and compliance CIS benchmarks are great way to start. …

CloudTrail is undoubtably powerful source of audit data for all AWS user level and API level activities. However building any kind of security optics dashboard with CloudTrail is not easy for several reasons: Cannot differentiate read-only from destructive API calls. Over 800 different unique event names. Which ones are important? …

Discovery operates large scale AWS and Azure environments with over 100 AWS accounts and Azure Subscriptions. These accounts and subscriptions contain more than 1,000,000 configurable assets. Discovery Cloud Security team developed an in-house solution similar to Scout2 and Cloud Custodian to perform AWS and Azure compliance check verifications. Discovery’s solution…

Citrix operates large scale AWS and Azure environments with over 100 AWS accounts and Azure Subscriptions. These accounts and subscriptions contain more than 1,000,000 configurable assets. Citrix Cloud Security team relied on several open source frameworks to perform AWS compliance verification. Namely Cloud Custodian and Scout2. For Azure, Citrix created…

Love GuardDuty is not just a replacement for Snort or similar NIDS. GuardDuty analyzes network traffic via VPC Flow Logs but also digs deeper by inspecting AWS CloudTrail and Route53 logs as well. GuardDuty has a very simple user interface that does not overwhelm even when dealing with tens of…