Cloud Security Controls

Question 1

Standard Security Controls

Answer 1

Patches & Updates
Change Defaults
Firewall
IPS/IDS
SDLC
Logging and Monitoring
Anti-DOS Systems
Encryption
Endpoint Host Protection

Question 2

Cloud-Specific Security Controls

Answer 2

IAM Policy

Bucket Enabling

Question 3

Kubernettes Security Controls

Answer 3

Update
Restrict API access
Restrict SSH access
Use namespaces
Network policies
Do not run as root
IAM access
Security reviews

Question 4

Docker Security Controls

Answer 4

Update
Do not expose daemon to container
Set user
Limit access
No new privileges flag
-icc false flag
Selinux
Read-only 
Static analysis tools
Logging

Question 5

Cloud Security Control Tools

Answer 5

Qualys
Prisma cloud
Aqua cloud
Tenable
Kube-bench
Sumo Logic