Book Image

Cloud Security Automation

By : Prashant Priyam
Book Image

Cloud Security Automation

By: Prashant Priyam

Overview of this book

Security issues are still a major concern for all IT organizations. For many enterprises, the move to cloud computing has raised concerns for security, but when applications are architected with focus on security, cloud platforms can be made just as secure as on-premises platforms. Cloud instances can be kept secure by employing security automation that helps make your data meet your organization's security policy. This book starts with the basics of why cloud security is important and how automation can be the most effective way of controlling cloud security. You will then delve deeper into the AWS cloud environment and its security services by dealing with security functions such as Identity and Access Management and will also learn how these services can be automated. Moving forward, you will come across aspects such as cloud storage and data security, automating cloud deployments, and so on. Then, you'll work with OpenStack security modules and learn how private cloud security functions can be automated for better time- and cost-effectiveness. Toward the end of the book, you will gain an understanding of the security compliance requirements for your Cloud. By the end of this book, you will have hands-on experience of automating your cloud security and governance.
Table of Contents (15 chapters)
Title Page
Packt Upsell


AWS also offers scalable file storage to use with EC2 using the NFS protocol. In EFS, the storage capacity is elastic, therefore it grows and shrinks when you add or remove files, respectively.

You can use EFS with multiple EC2 instances as a common data source for the same point of time. All of them can concurrently access the EFS stored files.

We can use it with an on-premise server as well when we have a direct connection between the on-premise server and VPC.

To use EFS, you need to log in to the AWS Console and search for EFS. Now, from the EFS Console we define the filesystem access policy. In the EFS Console, it is not mandatory to have optional configuration but, if you want, you can define the optional settings:

In the preceding screenshot, which shows what you can see while creating the EFS, we need to specify the availability zone and security.

We can use EFS for database backup, to store web app files, and for cloud burst and enterprise applications that need to have shared storage...