Cloud Security Masterclass: Your Current Cloud Security Won’t Prevent Attacks - ERP Spain.com - España y América Latina

The #1 cloud risk is the control plane APIs. When security is focused solely on preventing entry points into a cloud environment, defenders need to get it right 100% of the time. Attackers only need to get lucky once. A close examination of real-world cloud breaches shows that the security industry is approaching the problem all wrong, and these exploits will continue unabated until we change our thinking and focus on inherently-secure cloud design. In this Cloud Security Masterclass, Snyk Chief Architect Josh Stella will walk through the taxonomy of cloud security involving the three vectors that we can manipulate in the design of secure cloud environments: resources, actions, and time. You’ll walk away from this session with a clear understanding of: The nature of modern cloud breaches and how control plane API attacks unfold Identifying cloud design failure and understanding blast radius risk in your environment How to use policy as code to guide developers in secure cloud infrastructure design