Amazon Web Services (AWS®) is a flexible, agile cloud platform that is easy to set up and configure. Resources like repositories and EC2 instances can be set up quickly so workloads can immediately begin to take advantage of the cloud.
AWS applies the Shared Responsibility Model to distinguish the different aspects of security management. AWS owns the infrastructure, physical network, and hypervisor. The enterprise owns the workload OS, apps, virtual network, and access to its tenant environment/account and the data.
When you flip the switch and make it public, though, what doors are you leaving open?
Proper configuration can get tricky if you don’t know what you don’t know. Even experts can miss avoidable, high-risk vulnerabilities for their cloud instances.
Before any organization can be effective at fixing security issues, it must first understand the risks its cloud environment could likely face. What follow are the 10 most common security risks and misconfigurations found in AWS deployments.
Remediation begins with discovery.