December 20179 security requirements. Gaining a clear understanding of the various security options and how to apply them in your solution is crucial for successful and secure cloud adoption.Manage identity and accessThis involves two aspects - managing identities and governing user access to cloud resources; and managing access to your cloud applications. The cloud users include your developers, administrators who consume infrastructure, platform or services from the cloud. Cloud Identity and Access Management (IAM) is required to manage the identity involved in privileged activities and tracking their deployment and operations activities, like those performed by cloud administrators. Multifactor authentication may be used to verify user's identity. For managing user and customer access to your cloud applications; Single Sign On (SSO) and Social login and User Profile tracking capabilities can be leveraged as a service from the cloud. For enterprise users, the solution should authenticate through enterprise directory while the end users can "bring their own identity" like Facebook, Google or any social IDs to access the cloud applications. You may also need to define access control policies for the cloud resources and cloud services. For example-users should access the minimum privileges from the granted privileges to complete the task; also setting detailed context based access control policies for specific resources will help improve the overall security level in the enterprise.Protect Infrastructure Data and ApplicationSecure Gateway and Connectivity between the cloud and the enterprise is a key component in enterprise's cloud strategy. Security systems like those available in traditional data centres are also available on cloud, to provide both network protection and isolation. Enhanced systems like, micro-segmentation and capability driven network security groups have recently been introduced to provide workload-centric connectivity or isolation. Another critical aspect is designing a secure dev-ops process that includes steps to identify and manage vulnerabilities in the VM, container and application code to prevent any attacks. The solution should cover techniques to encrypt data at rest (files, objects, storage) and in motion, steps on how to monitor data activity and to verify and audit data outsourced to the cloud. The encryption solution should be integrated with customer managed keys secured in a Hardware Security Module (HSM) to ensure complete control of your data in cloud.Gain VisibilityContinuously monitoring each activity and event in the cloud is necessary for complete visibility of your cloud-based environments. Security and visibility can be enhanced in the virtual infrastructures by collecting and analyzing logs in real-time across various components and services in the cloud. Visibility across virtualized stacks and IaaS, PaaS and SaaS clouds, gives a clear view of your enterprise cloud and insights into any associated risks while enabling the enterprise to better manage their audit and compliance processes.These five measures will act as your seat belt and air bags in your security architecture and will help your enterprise accelerate in the cloud journey with confidence.
< Page 8 | Page 10 >