Cloud Auditing Best Practices

9

Walk-Through – Assessing Policy Settings and Resource Controls

In the previous chapter, we put our learnings of cloud IAM control settings to the test. Now, we will perform some practice with identifying and assessing policy and resource control settings.

In this chapter, we’ll cover the following main topics:

• Preparing to assess network, infrastructure, and resource controls
• Assessing network and firewall settings
• Assessing resource management policies
• Assessing data security policies

We will pose a sample assessment question for each of the topic areas and execute a basic test procedure. By the end of this chapter, we will have a deeper understanding of assessing network, resource, and data security policies as part of an enterprise ...