Security – best practices

Let's take a look at some of the best practices that can be considered while architecting the hybrid cloud environment.

Implementing a CMDB/asset list

It's a good idea to implement a configuration management database (CMDB) or an asset list with details as to what is running in each of the systems to ensure proper security controls can be put in place.

User accounts and authentication

We need to have best practices for user accounts and authentication policies. The best practices in this realm are as follows:

• Multi-factor authentication: We should enable multi-factor authentication, using products such as SecureID, or even some kind of a Time-based One Time Password (TOTP) such as Google Authenticator
• Strong password policies: We should set strong password policies for users in relation to password reuse, force password changes, length of passwords, and so on 
• Different privileged and normal accounts: We should have different accounts for administrative users for performing...