Cloud Security With AWS

Transcript

5. • • • • • • •
6. Sr No. Title Authors Methodology 1 Emerging Security challenges in cloud computing: An insight to cloud security challenges and their mitigation Akhil Behal A Breach in the security of any component in the cloud can be both disaster for the organization (the customer) and defacing for the provider. Akhil Behal explores the security issues related to the cloud. The paper also discusses the existing security approaches to secure the cloud infrastructure and applications and their drawbacks 2 Cloud security issues and challenges: A survey Ashish Singh, Kakali Chatterjee This paper discussed about the basic features of the cloud computing, security issues, threats and their solutions. Additionally, the paper describes several key topics related to the cloud, namely cloud architecture framework, service and deployment model, cloud technologies, cloud security concepts, threats, and attacks.
7. Sr No. Title Authors Methodology 3 Cloud Computing Security: Amazon Web Service Saakshi Narula, Arushi Jain, Prachi This paper provides the review of security research in the field of cloud security. After security research paper have been presented the working of AWS (Amazon Web Service) cloud computing. AWS is the most trusted provider of cloud computing which not only provides the excellent cloud security but also provides excellent cloud service 4 Benefits of AWS in Modern Cloud Sourav Mukherjee article gives an overview of the benefits of AWS in the modern cloud. Cloud computing is performing well in todays World and boosting the ability to use the internet more than ever
9. CLOUD DEPLOYM Public Private Hybrid
10. How does Cloud Security Work ? The implementation of cloud security is unique per cloud provider. Each cloud provider has their own security products/services which can be used to apply relevant security guardrails in your cloud environment. AWS GCP Azure
11. CLOUD DEPLOYM Public Private Hybrid
12. Misconfiguration Unauthorized Access Insecure Interfaces/APIs External Sharing of Data Malicious Insiders Denial of Service Attacks
13. CLOUD DEPLOYM Public Private Hybrid Amazon Web Services is a subsidiary of Amazon providing on-demand cloud computing platforms and APIs to individuals, companies, and governments, on a metered pay-as-you-go basis Leading platform for cloud computing Offers compute power, database storage, content delivery , Hosting For Web Services S3 Services .
14. CLOUD DEPLOYM Public Private Hybrid Identity and Access Management Detective Controls Infrastructure Protection Data Protection Incident Response DDoS Mitigation AWS Security Components
15. • Amazon Simple Storage Service (Amazon S3) is an object storage service that Allows User To Store Data in Form Of Objects e.g Video Audio And Images • Why S3 Misconfigures • S3 policies • Poor Encryption CLOUD DEPLOYM Public Private Hybrid S3 Buckets And S3 Misconfiguration
16. CLOUD DEPLOYM Public Private Hybrid S3 Misconfiguration Explained aws s3 ls s3://[aws-bucket-name] --no-sign-request aws s3 mv yourfile s3://[aws-bucket-name]/hack.txt --no-sign-request aws s3 rm s3://[aws-bucket-name]/file.svg
17. How To Secure S3 Buckets • Implement Identity and Access Management (IAM) policies. • S3 Encryption • Restricting S3 Access Using Bucket Policies
18. Capital One Data Breach Case study • SSRF Vulnerability In Web Application Allow Access To EC2 Data • http://169.254.169.254/latest/meta- data/identity-credentials/ec2/security- credentials/ec2-instance/ • Access To Sensitive s3 Buckets
19. • • • • •
20. • • • • • • • • • • • •