Cloud Security

Amazon Web Services

---

• Amazon
  • https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html
  • https://aws.amazon.com/security/security-resources/
    • site:awsstatic.com security
  • https://aws.amazon.com/compliance/resources/
  • https://aws.amazon.com/blogs/security/
  • http://docs.aws.amazon.com/awscloudtrail/latest/userguide/send-cloudtrail-events-to-cloudwatch-logs.html
  • http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Security.html
  • http://docs.aws.amazon.com/AmazonS3/latest/dev/example-bucket-policies.html
  • https://www.youtube.com/user/AWSwebinars/
• https://github.com/open-guides/og-aws
• http://flaws.cloud/
• Netflix
  • https://github.com/Netflix/security_monkey
  • https://github.com/Netflix-Skunkworks/aardvark
  • https://github.com/Netflix/Repokid

Google Cloud Platform

---

• https://github.com/nccgroup/G-Scout

Microsoft Azure

---

Containers

---

Docker

• https://docs.docker.com/engine/security/security/
• https://www.docker.com/sites/default/files/WP_IntrotoContainerSecurity_08.19.2016.pdf
• https://medium.com/@ewindisch/on-the-security-of-containers-2c60ffe25a9e
• https://www.nccgroup.trust/us/our-research/understanding-and-hardening-linux-containers/
• https://www.nccgroup.trust/us/our-research/abusing-privileged-and-unprivileged-linux-containers/
• https://www.blackhat.com/docs/eu-15/materials/eu-15-Bettini-Vulnerability-Exploitation-In-Docker-Container-Environments.pdf
• https://www.blackhat.com/docs/eu-15/materials/eu-15-Bettini-Vulnerability-Exploitation-In-Docker-Container-Environments-wp.pdf
• https://dadario.com.br/courses/docker-security-fundamentals/