Data exfiltration and VPC Service Controls
In the public cloud, there are several threats that organizations need to understand before deploying critical workloads. Here are a few threats that would lead to data exfiltration:
- Misconfigured IAM policies
- Malicious insiders copying data to an unauthorized destination
- Compromised code copying data to an unauthorized destination
- Access to data from unauthorized clients using a stolen credential
Here are various paths via which data can be exfiltrated in the cloud:
- Internet <-> service (stolen credentials)
- Copy to internet
- Service <-> service (insider threat)
- Copy from one storage service to another
- VPC <-> service (compromised VM)
- Copy to consumer Google services
- Copy to public GCS buckets/BigQuery dataset/GCR repo
Google Cloud offers some excellent offerings to stop the exfiltration of data as a part of its data loss prevention portfolio of products. VPC Service Controls extends...
