Walk-Through – Assessing Policy Settings and Resource Controls
In the previous chapter, we put our learnings of cloud IAM control settings to the test. Now, we will perform some practice with identifying and assessing policy and resource control settings.
In this chapter, we’ll cover the following main topics:
- Preparing to assess network, infrastructure, and resource controls
- Assessing network and firewall settings
- Assessing resource management policies
- Assessing data security policies
We will pose a sample assessment question for each of the topic areas and execute a basic test procedure. By the end of this chapter, we will have a deeper understanding of assessing network, resource, and data security policies as part of an enterprise cloud audit.
