DevOps Articles

How to audit and secure an AWS account

Data leakage and exposed credentials: these are just a couple of the cloud security concerns that keep cybersecurity pros up at night, ​​according to Statista. That’s why investing the time in properly auditing and securing cloud environments should remain a top priority for any organization that values its continued existence.

Auditing an AWS account lets you review IAM users, roles, groups, and policies and see if there are any users or tools that have excessive permissions.

These are Don’s bare minimum to start with: AWS Organizations is an area that is one of the most underrated things you can do for security.

Guard Duty is always good to have on, but if you’re running EC2 instances and you don’t have a strong vulnerability management program, you might want to turn on Inspector to look for patches that are missing and things of that nature.