Cloud Auditing Best Practices

8

Walk-Through – Assessing IAM Controls

From Chapter 1, Cloud Architecture and Navigation, to Chapter 6, Tips and Techniques for Advanced Auditing, we built foundational knowledge of cloud structure, navigation, and security controls, and in Chapter 7, Tools for Monitoring and Assessing, we learned about tools available for auditing. Now, it’s time to put our learning into practice by performing some example audit walk-throughs of basic controls within the major cloud providers.

In this chapter, we’ll cover the following main topics:

• Preparing to assess cloud IAM controls
• Assessing authentication and authorization
• Assessing access assignment controls
• Assessing privileged access controls
• Assessing device controls

We will pose an assessment ...