Read Time: 1 minute, 11 seconds
tl;dr: You are on your journey to the cloud, adding mission critical resources and finding ways to monitor network performance and security. What’s next? Security in the cloud means full visibility to cloud workloads. How will your enterprise IT team “see” what it needs to see?
By now you’ve got some mission critical resources in the public cloud.
By now you and your IT/IS organization understand the benefits of the cloud.
By now your journey to the cloud is underway.
But did you know your public cloud provider operates using a shared responsibility model – which means you maintain responsibility for information, security, network and firewall configuration, server-side encryption and data integrity authentication? This means if you want to reduce or eliminate blind spots, it’s literally up to each and every enterprise IT team to secure their organization’s cloud data.
Security in the cloud requires that your inspection, detection, monitoring, storage and compliance tools, teams, workflows and processes have access to full, unlocked packet traffic and netflow from cloud workloads. Those cloud workloads are dynamic, ephemeral and distributed. In short, security in the cloud is predicated on full, unrestricted packet visibility
Cloud providers are not security and monitoring tool developers. Both Azure and AWS will help you with add-on cloud-native security solutions. But there’s still no solution for total visibility.
According to Gartner, by 2022 95% of cloud security failures will happen somewhere in the customer's portion of the shared responsibility model. So, at least for now, the onus is on each IT team to get the visibility they need, prevent those blind spots in the cloud and secure their cloud presence until a solution changes how the task is done.