You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The current sheet doesn't discuss the Shared Responsibility model.
How should this be resolved?
A shared security model basics section and an intro into self-managed vs managed tooling should be provided before the Self-managed tooling maintenance section.
The "basics" section will have a pros/cons section covering each level of management. Topics to be considered will be: level of control, complexity, cost/budget, flexibility, reliability, availability, etc.
An example will be given which discusses securing different types of tools at the same management level.
CSP agnostic example: Securing a managed object storage vs securing a managed database (like S3 and DynamoDB).
The text was updated successfully, but these errors were encountered:
Josh-Beck
added
ACK_WAITING
Issue waiting acknowledgement from core team before to start the work to fix it.
HELP_WANTED
Issue for which help is wanted to do the job.
UPDATE_CS
Issue about the update/refactoring of a existing cheat sheet.
labels
Jul 17, 2023
szh
added
ACK_OBTAINED
Issue acknowledged from core team so work can be done to fix it.
and removed
ACK_WAITING
Issue waiting acknowledgement from core team before to start the work to fix it.
labels
Jul 18, 2023
What is missing or needs to be updated?
The current sheet doesn't discuss the Shared Responsibility model.
How should this be resolved?
A shared security model basics section and an intro into self-managed vs managed tooling should be provided before the Self-managed tooling maintenance section.
The "basics" section will have a pros/cons section covering each level of management. Topics to be considered will be: level of control, complexity, cost/budget, flexibility, reliability, availability, etc.
An example will be given which discusses securing different types of tools at the same management level.
CSP agnostic example: Securing a managed object storage vs securing a managed database (like S3 and DynamoDB).
Links
The text was updated successfully, but these errors were encountered: