Book Image

Cloud Security Automation

By : Prashant Priyam
Book Image

Cloud Security Automation

By: Prashant Priyam

Overview of this book

Security issues are still a major concern for all IT organizations. For many enterprises, the move to cloud computing has raised concerns for security, but when applications are architected with focus on security, cloud platforms can be made just as secure as on-premises platforms. Cloud instances can be kept secure by employing security automation that helps make your data meet your organization's security policy. This book starts with the basics of why cloud security is important and how automation can be the most effective way of controlling cloud security. You will then delve deeper into the AWS cloud environment and its security services by dealing with security functions such as Identity and Access Management and will also learn how these services can be automated. Moving forward, you will come across aspects such as cloud storage and data security, automating cloud deployments, and so on. Then, you'll work with OpenStack security modules and learn how private cloud security functions can be automated for better time- and cost-effectiveness. Toward the end of the book, you will gain an understanding of the security compliance requirements for your Cloud. By the end of this book, you will have hands-on experience of automating your cloud security and governance.
Table of Contents (15 chapters)
Title Page
Packt Upsell

DNS security

In AWS, we have a global DNS solution provided by AWS named Route 53. It is a highly available and scalable domain name service that supports both IPv4 and IPv6. 

It connects end user requests from the internet to AWS services, and also transfers traffic to external endpoints (outside of AWS) as well.

Route 53 helps you with:

  • DNS management: It helps you host your new subdomain or existing subdomain while keeping parent domain to other DNSs. 
  • Traffic management: If we have multiple web services running in multiple regions, then it would be a very complex task to define the record sets in Route 53 routing policies. You can define one policy, but combining multiple policies is a very tough task. For this, Route 53 gives you a visual editor where you can create a tree in a fraction of time and save maximum effort. You can define the traffic policy in Route 53 using the AWS Management Console:
  • Availability monitoring: Route 53 helps you monitor the health and performance of your web...