Cloud accounts, networks, and logs
Public cloud security support can include account roles, cloud networks, security group policies, access keys, activity logs, backup boundaries, and security baseline recommendations.
The review is based on the selected platform, the organization’s responsibilities, and the access available for the work.
Reviewing main and secondary accounts, role permissions, and third-party access to cloud resources.
A cloud control that defines which inbound and outbound connections can reach an instance.
A credential used by programs or external systems to call cloud APIs; its access and storage need to be controlled.
Records of logins, resource changes, permission updates, and other important actions.
Cloud access rules can accumulate
Projects and workload changes may add users, keys, network paths, and exceptions. Without review, administrators can lose track of why access was granted or who should maintain it.
Documented ownership and access rules help teams review changes and plan routine maintenance.
Cloud account, network, and baseline reviews
Recommendations are limited to settings and evidence available in the selected cloud platform.
Main accounts, subaccounts, and roles
Review access for operations, development, external providers, and management and reduce routine use of shared high-privilege accounts.
Cloud networks, subnets, and security groups
Review virtual networks, subnet design, allowlists, and security group rules for unnecessary exposure or broad access.
Access keys and application credentials
Review API keys, scripts, and automated access for storage, rotation, and permission scope.
Log retention and important actions
Make logins, resource changes, permission updates, and higher-risk actions available for review.
Backups, snapshots, and recovery paths
Review protection and recovery for cloud servers, databases, and object storage.
Cloud baselines and remediation priorities
Prepare an issue list and suggested priorities based on cloud usage, team capacity, and business sensitivity.
Access and activity records for review
A record of roles, network rules, and review priorities can help teams coordinate cloud access and configuration changes.
For cloud resource planning and workload deployment, see our Public Cloud Services page.
Define resource access and permitted actions for each role.
Make subnets, security groups, and exposed ports easier to review.
Keep login, resource, and permission records available for follow-up.
Include backups and snapshots in a review of recovery coverage.