Book Image

Hybrid Cloud Security Patterns

By : Sreekanth Iyer
Book Image

Hybrid Cloud Security Patterns

By: Sreekanth Iyer

Overview of this book

Security is a primary concern for enterprises going through digital transformation and accelerating their journey to multi-cloud environments. This book recommends a simple pattern-based approach to architecting, designing and implementing security for workloads deployed on AWS, Microsoft Azure, Google Cloud, and IBM Cloud. The book discusses enterprise modernization trends and related security opportunities and challenges. You’ll understand how to implement identity and access management for your cloud resources and applications. Later chapters discuss patterns to protect cloud infrastructure (compute, storage and network) and provide protection for data at rest, in transit and in use. You’ll also learn how to shift left and include security in the early stages of application development to adopt DevSecOps. The book also deep dives into threat monitoring, configuration and vulnerability management, and automated incident response. Finally, you’ll discover patterns to implement security posture management backed with intelligence and automated protection to stay ahead of threats. By the end of this book, you’ll have learned all the hybrid cloud security patterns and be able to use them to create zero trust architecture that provides continuous security and compliance for your cloud workloads.
Table of Contents (18 chapters)
1
Part 1: Introduction to Cloud Security
3
Chapter 2: Understanding Shared Responsibility Model for Cloud Security
4
Part 2: Identity and Access Management Patterns
7
Part 3: Infrastructure Security Patterns
10
Part 4: Data and Application Security Patterns
13
Part 5: Cloud Security Posture Management and Zero Trust Architecture
14
Chapter 9: Managing the Security Posture for Your Cloud Deployments
15
Chapter 10: Building Zero Trust Architecture with Hybrid Cloud Security Patterns

Data Security Patterns

In this chapter, we will learn about the patterns that can be leveraged to secure data and storage resources in multiple clouds. The key areas covered will be as follows:

  • Protecting data at rest
  • Protecting data in transit
  • Protecting data in use

The primary object of the data security patterns shared in the following diagram is to protect the data with respect to the following aspects:

  • Confidentiality – Making sure that only the people who need to know are made aware of the information and that no one else can access it in an unauthorized way.
  • Integrity – Ensuring that the content, while it is transferred or communicated, is not altered in transmission. Data integrity refers to maintaining and assuring the accuracy and consistency of data over its entire life cycle.
  • Availability – Ensuring the data is available to the right authorized entities at the right time and is accessible.
...