Securing Compute Services – Virtual Machines
Speaking about cloud services, specifically Infrastructure as a Service (IaaS), perhaps the most used IaaS service is compute – from the traditional virtual machines (VMs) through modern compute services such as containers and, eventually, serverless.
Compute services allow us to deploy and run our applications from a single VM used for development purposes to a large production-scale environment.
This chapter will cover VM services and provide you with the best practices on how to securely deploy and manage each of them.
In this chapter, we will cover the following topics:
- Securing VMs
- Fundamental best practices for securing VMs
- Best practices for authentication
- Best practices for securing network access to an instance
- Best practices for conducting patch management
- Best practices for securing backups
