corpus.blog
41554 blogs · 4,644,446 posts Claim your blog
Record · corpus.blog/posts/01a0874f-030c-72bb-8ac7-61e3905240e6

What to look for when reviewing a company's infrastructure

blog.marcolancini.it · published 21 October 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.marcolancini.it Wayback capture
1blogs citing
First cited
23 Jan 2023
Most recent
23 Jan 2023
Rank this month
not ranked
Links from this post
123
Words captured
5,691

Cited by

Blog
In the post
Date
allanbreyes
Literature Insights Read at the source ↗
23 Jan 2023

Links from this post

Link
Host
On Establishing a Cloud Security Program Read at the source ↗
blog.marcolancini.it
https://roadmap.cloudsecdocs.com/
roadmap.cloudsecdocs.com
https://blog.marcolancini.it/cloud-security-strategies/
blog.marcolancini.it
https://blog.marcolancini.it/images/posts/blog_cloudsecurity_infrareview_abstraction.png
blog.marcolancini.it
https://blog.marcolancini.it/images/posts/blog_cloudsecurity_infrareview_pyramid.png
blog.marcolancini.it
https://blog.marcolancini.it/images/posts/blog_cloudsecurity_infrareview_csps.png
blog.marcolancini.it
https://blog.marcolancini.it/images/posts/blog_cloudsecurity_infrareview_org_aws.png
blog.marcolancini.it
https://blog.marcolancini.it/images/posts/blog_cloudsecurity_infrareview_org_gcp.png
blog.marcolancini.it
https://console.aws.amazon.com/organizations/v2/home/accounts
console.aws.amazon.com
https://console.cloud.google.com/cloud-resource-manager
console.cloud.google.com
https://blog.marcolancini.it/images/posts/blog_cloudsecurity_infrareview_org_aws_list.png
blog.marcolancini.it
https://blog.marcolancini.it/images/posts/blog_cloudsecurity_infrareview_org_gcp_list.png
blog.marcolancini.it
https://summitroute.com/blog/2018/06/18/how_to_inventory_aws_accounts/
summitroute.com
https://twitter.com/0xdabbad00
twitter.com
https://github.com/lyft/cartography
github.com
https://blog.marcolancini.it/continuous-cloud-visibility/
blog.marcolancini.it
Mapping Moving Clouds: How to stay on top of your ephemeral environments with Cartography Read at the source ↗
blog.marcolancini.it
Tracking Moving Clouds: How to continuously track cloud assets with Cartography Read at the source ↗
blog.marcolancini.it
https://us-east-1.console.aws.amazon.com/billing/home?region=us-east-1
us-east-1.console.aws.amazon.com
https://console.cloud.google.com/billing/
console.cloud.google.com
https://blog.marcolancini.it/images/posts/blog_cloudsecurity_infrareview_org_aws_cost.png
blog.marcolancini.it
https://cloudsecdocs.com/
cloudsecdocs.com
https://cloudsecdocs.com/aws/defensive/resources/references/
cloudsecdocs.com
https://aws.amazon.com/config/
aws.amazon.com
https://cloud.google.com/asset-inventory/docs/overview
cloud.google.com
https://blog.marcolancini.it/images/posts/blog_cloudsecurity_infrareview_org_aws_config.png
blog.marcolancini.it
https://blog.marcolancini.it/images/posts/blog_cloudsecurity_infrareview_org_gcp_assetinventory.png
blog.marcolancini.it
https://aws.amazon.com/cli/
aws.amazon.com
https://cloud.google.com/sdk/gcloud
cloud.google.com
https://docs.aws.amazon.com/vpc/latest/userguide/VPC_SecurityGroups.html
docs.aws.amazon.com
https://cloud.google.com/vpc/docs/firewalls
cloud.google.com
https://cloudsecdocs.com/gcp/services/networking/hybrid_connectivity/
cloudsecdocs.com
https://blog.marcolancini.it/images/posts/blog_cloudsecurity_infrareview_csp_architecture.png
blog.marcolancini.it
https://aws.amazon.com/blogs/mt/scale-multi-account-architecture-aws-network-firewall-and-aws-control-tower/
aws.amazon.com
https://blog.marcolancini.it/images/posts/blog_cross_account_auditing_AWS.png
blog.marcolancini.it
https://cloudsecdocs.com/aws/defensive/resources/iam/
cloudsecdocs.com
https://cloudsecdocs.com/gcp/defensive/resources/iam/
cloudsecdocs.com
https://blog.marcolancini.it/images/posts/blog_cartography_graph_iam_roles.png
blog.marcolancini.it
https://aws.amazon.com/cloudtrail/
aws.amazon.com
https://aws.amazon.com/cloudwatch/
aws.amazon.com
https://aws.amazon.com/guardduty/
aws.amazon.com
https://cloud.google.com/monitoring
cloud.google.com
https://cloud.google.com/logging
cloud.google.com
Security Logging in Cloud Environments - AWS Read at the source ↗
blog.marcolancini.it
Security Logging in Cloud Environments - GCP Read at the source ↗
blog.marcolancini.it
https://blog.marcolancini.it/images/posts/blog_cloud_logging_aws_architecture.png
blog.marcolancini.it
https://blog.marcolancini.it/images/posts/blog_cloud_logging_gcp_architecture.png
blog.marcolancini.it
https://www.vaultproject.io/
vaultproject.io
https://aws.amazon.com/secrets-manager/
aws.amazon.com
https://cloud.google.com/secret-manager
cloud.google.com
https://blog.marcolancini.it/images/posts/blog_cloudsecurity_infrareview_vault.png
blog.marcolancini.it
https://cloudsecdocs.com/aws/defensive/resources/scps/
cloudsecdocs.com
https://cloudsecdocs.com/gcp/defensive/resources/org_policies/
cloudsecdocs.com
https://aws.amazon.com/products/security/
aws.amazon.com
https://aws.amazon.com/security-hub/
aws.amazon.com
https://aws.amazon.com/inspector/
aws.amazon.com
https://aws.amazon.com/detective/
aws.amazon.com
https://aws.amazon.com/firewall-manager/
aws.amazon.com
https://aws.amazon.com/shield/
aws.amazon.com
https://aws.amazon.com/waf/
aws.amazon.com
https://aws.amazon.com/macie/
aws.amazon.com
https://aws.amazon.com/cloudhsm/
aws.amazon.com
https://blog.marcolancini.it/images/posts/blog_cloud_logging_aws_relationships.png
blog.marcolancini.it
https://cloud.google.com/products/security-and-identity
cloud.google.com
https://cloud.google.com/security-command-center
cloud.google.com
https://cloud.google.com/ids
cloud.google.com
https://cloud.google.com/asset-inventory
cloud.google.com
https://cloud.google.com/resource-manager
cloud.google.com
https://cloud.google.com/iap
cloud.google.com
https://cloud.google.com/vpc-service-controls
cloud.google.com
https://cloud.google.com/dlp
cloud.google.com
https://cloud.google.com/security-key-management
cloud.google.com
https://cloudsecdocs.com/aws/services/iam/iam/
cloudsecdocs.com
https://cloudsecdocs.com/gcp/services/iam/projects/
cloudsecdocs.com
https://blog.marcolancini.it/images/posts/blog_cloudsecurity_infrareview_securityhub.png
blog.marcolancini.it
https://blog.marcolancini.it/images/posts/blog_cloudsecurity_infrareview_scc.png
blog.marcolancini.it
https://cloudsecdocs.com/aws/offensive/pentest/resources/
cloudsecdocs.com
https://cloudsecdocs.com/gcp/offensive/pentest_resources/
cloudsecdocs.com
https://cloudsecdocs.com/azure/offensive/pentest_resources/
cloudsecdocs.com
https://cloudsecdocs.com/aws/defensive/tooling/audit/
cloudsecdocs.com
https://cloudsecdocs.com/gcp/defensive/tooling/audit/
cloudsecdocs.com
https://cloudsecdocs.com/azure/defensive/tooling/audit/
cloudsecdocs.com
https://cloudsecbooks.com
cloudsecbooks.com
https://blog.marcolancini.it/images/posts/blog_cloudsecurity_infrareview_microservices.png
blog.marcolancini.it
https://blog.marcolancini.it/images/posts/blog_cloudsecurity_infrareview_tech.png
blog.marcolancini.it
https://blog.marcolancini.it/images/posts/blog_kubernetes_threatmodel_boundaries.png
blog.marcolancini.it
https://blog.marcolancini.it/images/posts/blog_serverless_mailing_setup.png
blog.marcolancini.it
https://docs.aws.amazon.com/systems-manager/latest/userguide/what-is-systems-manager.html
docs.aws.amazon.com
https://cloud.google.com/compute/docs/oslogin
cloud.google.com
The History of Pets vs Cattle and How to Use the Analogy Properly
cloudscaling.com
https://blog.marcolancini.it/images/posts/blog_cloudsecurity_infrareview_oidc.png
blog.marcolancini.it
https://mjarosie.github.io/dev/2021/09/15/iam-roles-for-kubernetes-service-accounts-deep-dive.html
mjarosie.github.io
https://kubernetes.io/docs/tasks/debug-application-cluster/audit/
kubernetes.io
https://falco.org/
falco.org
https://www.fluentd.org/
fluentd.org
https://blog.marcolancini.it/images/posts/blog_cloudsecurity_infrareview_falco.png
blog.marcolancini.it
https://aws.amazon.com/xray/
aws.amazon.com
https://www.datadoghq.com/
datadoghq.com
https://blog.marcolancini.it/images/posts/blog_cloudsecurity_infrareview_xray.png
blog.marcolancini.it
https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/AgentReference.html
docs.aws.amazon.com
https://cloud.google.com/stackdriver/docs/solutions/agents/ops-agent
cloud.google.com
https://osquery.io/
osquery.io
https://blog.marcolancini.it/images/posts/blog_cloudsecurity_infrareview_vault_k8s.png
blog.marcolancini.it
https://www.hashicorp.com/blog/kubernetes-vault-integration-via-sidecar-agent-injector-vs-csi-provider
hashicorp.com
https://github.com/open-policy-agent/gatekeeper
github.com
https://en.wikipedia.org/wiki/Conway%27s_law
en.wikipedia.org
https://blog.marcolancini.it/images/posts/blog_cloudsecurity_infrareview_repos.png
blog.marcolancini.it
https://en.wikipedia.org/wiki/Manu_Cornet
en.wikipedia.org
https://github.com/awslabs/git-secrets
github.com
https://blog.marcolancini.it/images/posts/blog_cloudsecurity_infrareview_iac.png
blog.marcolancini.it
https://thenewstack.io/terraform-1-0-reflects-what-hashicorp-has-learned-about-infrastructure-as-code/
thenewstack.io
https://cloudsecdocs.com/devops/pipelines/securing/compliance_as_code/
cloudsecdocs.com
https://cloudsecdocs.com/devops/pipelines/securing/container_scanning/
cloudsecdocs.com
https://blog.marcolancini.it/images/posts/blog_cloudsecurity_infrareview_pipeline.png
blog.marcolancini.it
https://sysdig.com/blog/dockerfile-best-practices/
sysdig.com
https://cloudsecdocs.com/containers/defensive/containers/secure_dockerfiles/
cloudsecdocs.com
https://cloudsecdocs.com/devops/pipelines/securing/container_pipelines/
cloudsecdocs.com
https://blog.marcolancini.it/images/posts/blog_cloudsecurity_infrareview_pipeline_secure_1.png
blog.marcolancini.it
https://blog.marcolancini.it/images/posts/blog_cloudsecurity_infrareview_pipeline_secure_2.png
blog.marcolancini.it
https://speakerdeck.com/rung/cd-pipeline?slide=31
speakerdeck.com
https://blog.marcolancini.it/images/posts/blog_cloudsecurity_infrareview_phases.png
blog.marcolancini.it
https://blog.marcolancini.it/images/posts/blog_cloudsecurity_infrareview_website.png
blog.marcolancini.it
https://feedback.marcolancini.it
feedback.marcolancini.it