It is often believed that by using the public cloud, security is someone else’s job. This couldn’t be more wrong. The first thing you must understand when building or migrating to the cloud is the shared responsibility model. It means that your cloud vendor is in charge of the security of the cloud, and you, the users, are in charge of the security in the cloud. You get to decide what kind of asset or service to run, who is going to get access to it, and how exactly.
But still, users skip this part, or at least don’t give it a deep dive. According to Gartner, by 2023 99% of cloud security failures will be the customer’s fault. That’s you again.
To make your life a little easier, here are a few steps I suggest to follow, in order to improve your cloud security posture and avoid from misconfiguration: