Cloud Ops - Clouded Bytes

September 12, 2024

Optimizing Disaster Recovery: How to Balance Performance with Security in the Cloud

Disaster recovery (DR) is crucial in cloud environments to ensure business continuity. However, achieving a balance between performance and security in cloud-based DR solutions requires thorough planning and implementation. Here’s a practical guide for security team managers and C-level officials to design and implement a disaster recovery strategy that successfully balances both aspects. 1. Key Considerations for Cloud-Based Disaster Recovery […]

September 9, 2024

Cloud Security Governance: Strategic Decisions for the Executive Suite

In today’s digital era, cloud security governance is crucial for executives and managers to ensure a secure, compliant, and resilient cloud environment. It’s not just about selecting the right cloud services—it’s about making critical decisions that affect the organization’s overall risk posture and security infrastructure. Below is a detailed, practical guide tailored for C-suite executives and managers to implement strong […]

Ayesha Arshad Cloud Security 4 min read

April 17, 2024

Understanding and Mitigating the LeakyCLI Vulnerability: AWS, GCP and Azure

Introduction to the LeakyCLI Vulnerability The LeakyCLI vulnerability identified by Orca Security is a critical issue found in the CLI tools of major cloud providers like AWS, Google Cloud, and Azure. This flaw allows sensitive credentials to be exposed in build logs, thereby increasing the risk of security breaches. Azure has fixed the vulnerability, whereas, AWS and GCP have given […]

Ayesha Arshad AWS 2 min read

February 14, 2024

Navigating the Aftermath: Mitigation Strategies for the “Mother of Leaks” Incident

The cybersecurity landscape was recently shaken by the “Mother of Leaks,” a colossal data breach consolidating information from various sources, affecting billions of records. This unprecedented leak underscores the vital importance of robust cybersecurity measures and responsive mitigation strategies. In this article, the outline contains critical steps IT organizations should take immediately and proactively to navigate the aftermath of this […]

Ayesha Arshad Cyber Security 4 min read

February 28, 2022

AWS Data Lifecycle Manager: A Quick way to automate AMI and Snapshot Management

AWS provides a quick and easy way to maintain your backups through AMIs and Snapshots. You can manually create AMIs and Snapshots of your EC2 Instance or you can automate this procedure for your ease. Automating the procedure lifts off the responsibility to generate updated AMIs and Snapshots. You can set retention policies and nominate your specified region for backup […]

Ayesha Arshad AWS 3 min read

January 18, 2022

Getting Started with AWS Identity and Access Management (IAM)

Identity and Access Management is one of the major components of the Triads of AWS Cloud Security. AWS is a vast collection of over 200 Web Services. And these Web Services are interacted with using API calls. Identity and Access Management provides the means to Authenticate, Secure and Authorize these API calls. These API calls are either made by Users or […]

Ayesha Arshad AWS 3 min read

January 17, 2022

Main Principles of Security in AWS Cloud

While discussing the Security of Amazon Web Services which is a collection of over 200 fully managed services. The first thing that needs to be established in this case is that it is a formidable task to secure all of the resources offered by AWS at the moment. Services that are totally different in nature from each other yet overlapping […]

Ayesha Arshad AWS 3 min read