Apply this filter to the logs (under operations from the cluster management screen). Default audit logs go back 180 days. resource.type=”gke_cluster” protoPayload.authorizationInfo.permission=”container.clusters.create” resource.labels.cluster_name=”your-cluster-name” Default audit logs go…
AWS innovation sandbox provides a way to create a separate sandbox account that can be managed from a management account. Along with the account level separation, network isolation…
Native Vulnerability and Misconfiguration Monitoring Tools run for a longer period of time – and capture account level events that may not be captured by Prisma and external…
Discourage use of local accounts and encourage SSO Groups. With SSO Groups, access can be granted either across multiple accounts or to individual accounts, using Permission Sets. SSO…
AWS allows for a no-ingress EC2 instance, that can only be accessed via Systems Manager. This is the recommended best practice. Also read – Identity Aware Proxy on…
There is no excerpt because this is a protected post.
There is no excerpt because this is a protected post.
There is no excerpt because this is a protected post.
Rubrik can be either a SaaS offering or an on premises cluster. If it needs FIPS 140-2 compliance, it will need a FIPs validated S3 endpoint, using AWS…