Cloud security automation
1. Cloud security automation
Now, let’s go over some Security automation techniques and best practices. Whether you’re a security engineer, an analyst, an incident responder, or an architect – creative ways to automate operations (starting with the mundane tasks first) can be a force multiplier that can reduce the burden of operations on your team. The key benefits of automating security operations revolves around factors of consistency, quickness, and reliability. Another benefit that is sometimes overlooked is that once you have encapsulated some task in automation, anyone can execute the task. This again gives us a chance to scale faster than the growth of threats and assets. There are a few risks in security automation to be aware of. Automated responses can sometimes result in disastrous outcomes, if not planned correctly. This can happen in both IT operations and Security. There are many examples where production systems at a major technology companies were deleted by automation. This is a possibility with automation, so it is important to have peer reviews, QA & testing, highly descriptive playbooks, and other processes in place when developing automated responses. You may not realize it, but you have already been exposed to security automation throughout this course. Many of the services we have covered have security automation built in. Just a few examples are: Security Command Center, which automates the discovery of misconfigurations and vulnerabilities and detects threats targeting your Google Cloud assets. Web Security Scanner, automates the testing of security vulnerabilities in your web applications by following links and exercising as many user inputs and event handlers as possible. And Artifact Registry, which ensures only approved container images can be deployed. Configure this automatic checkpoint to keep risky images from being deployed to Google Kubernetes Engine. Can you think of other services you’ve learned about throughout this course that automate many of the tasks a Cloud Security Architect or Engineer are tasked with?2. Let's practice!
Create Your Free Account
or
By continuing, you accept our Terms of Use, our Privacy Policy and that your data is stored in the USA.