Section 2 - Implement Secure Cloud Solutions Flashcards
Key Characteristics of Public Cloud Computing
Elasticity
Resource Pooling
Rapid Elasticity
Self-Service
Scalability
Broad Network Access
Pay as you go
Availability
Shared Responsibility of Public Cloud
Customer for security “in” the cloud
Provider for security “of” the cloud
What is the ability to protect data while running on a VM or memory
Encryption in use
AWS Nitro Enclaves
Azure Confidential Computing
Google Confidential Computing
What is the fundamental idea behind Cloud Security Posture Management Solutions
Multi-Cloud Capabilities
Visibility of Misconfigurations
Visibility of IAM
Cloud assets
Asset Risks over multi-cloud
Automation
Insights into attack vectors
What are the fundamentals around Cloud Infrastructure Entitlement Mangement (CIEM)
Monitor and manage Identifies and access privileges in multi-cloud while applying the principle of least privilege
Inventory of existing entitlements
Detecting and Remediating IAM misconfigurations
Identifying Shadow Admin accounts