TOPIC CLOUD
Shared Responsibility what the cloud won't secure for you
IN 10 SECONDS
The cloud provider secures the infrastructure (datacenter security, physical servers, hardware patching). You secure what's inside (operating system configs, application code, database access, and IAM policies).
GOTCHA The cloud is not a security buffer. Running configurations with open ingress ports (0.0.0.0/0) or default passwords will compromise your servers.
HOW SECURITY RESPONSIBILITY SEPARATES
01 Provider duties AWS secures physical datacenters against intrusions and maintains healthy hypervisor systems.
02 Your duties you write firewall rules, restrict IAM roles, and patch operating system software.
03 Security breach if a hacker gets access via a public S3 bucket or weak password, responsibility lies solely with you.
POKE IT YOURSELF
aws securityhub get-findings — fetch cloud infrastructure security audit findings
Drill this topic →
~70 sec read