Cloud Security Configuration

Overview

Cloud Security provides visibility into your cloud infrastructure across AWS, Azure, and Google Cloud. Monitor configurations, detect risks, and ensure compliance.

Step 1: Connect Cloud Providers

1. Navigate to Security Apps → Cloud Security
2. Click "Add Cloud Account"
3. Select your cloud provider (AWS, Azure, GCP)
4. Follow the provider-specific integration guide

Step 2: Configure Scan Settings

1. Select which services to monitor
2. Choose compliance frameworks to check against
3. Set scan frequency (recommended: continuous)
4. Configure severity thresholds for alerts

Step 3: Review Compliance Dashboard

1. View compliance score by framework (CIS, SOC 2, etc.)
2. Drill down into specific control failures
3. Export compliance reports for auditors
4. Track compliance trends over time

Step 4: Configure Risk Alerts

• Public S3 buckets or storage containers
• Overly permissive security groups
• Unencrypted databases or storage
• Missing logging or monitoring
• Root account usage

Step 5: Set Up Remediation Workflows

1. Enable auto-remediation for low-risk issues (optional)
2. Configure approval workflows for changes
3. Set up ticketing integration (Jira, ServiceNow)
4. Assign issue owners by resource type or team

Key Metrics to Monitor

• Public exposure of resources
• Encryption coverage
• IAM policy health
• Logging coverage
• Compliance score trends