You're reading from Cloud Security Handbook Effectively secure cloud environments using AWS, Azure, and GCP

Product type Paperback

Published in Apr 2025

Publisher Packt

ISBN-13 9781836200017

Length 482 pages

Edition 2nd Edition

Concepts

Cloud Security

Author (1):

Eyal Estrin

View More author details

Table of Contents (24) Chapters

Preface

1. Part 1:Securing Infrastructure Cloud Services FREE CHAPTER

2. Chapter 1: Introduction to Cloud Security

3. Chapter 2: Securing Compute Services – Virtual Machines

4. Chapter 3: Securing Compute Services – Containers and Kubernetes

5. Chapter 4: Securing Compute Services – Serverless and FaaS

6. Chapter 5: Securing Storage Services

7. Chapter 6: Securing Networking Services – Part 1

8. Chapter 7: Securing Networking Services – Part 2

9. Chapter 8: Securing Generative AI Services

10. Part 2: Deep Dive into IAM, Auditing, and Encryption

11. Chapter 9: Effective Strategies for Implementing IAM Solutions

12. Chapter 10: Auditing and Threat Management in Cloud Environments

13. Chapter 11: Applying Encryption in Cloud Services

14. Part 3: Threat and Vendor Management

15. Chapter 12: Understanding Common Security Threats to Cloud Services

16. Chapter 13: Engaging with Cloud Providers

17. Part 4: Advanced Use of Cloud Services

18. Chapter 14: Managing Hybrid Clouds

19. Chapter 15: Managing Multi-Cloud Environments

20. Chapter 16: Implementing DevSecOps

21. Chapter 17: Security in Large-Scale Environments

22. Index

Why subscribe?

23. Other Books You May Enjoy

Best practices for securing backups

Backing up is crucial for VM recovery. Each of the hyperscale cloud providers offers a managed service for scheduling backups to VMs. Access to backups is governed using authorization rules, and backups are encrypted at rest by default.

Backups are part of disaster recovery (DR) processes, ensuring the organization will be able to survive data loss (from accidental deletion of a VM up to a hacker deliberately deleting data) or data inaccessibility (such as ransomware encrypting an entire VM).

As a best practice, regularly conduct restore VMs from backup to validate that the backups are functioning and that data can be restored (especially in production environments).

Let us see how this figures for each of the platforms.

AWS Backup

This is a fully managed backup service supporting many AWS services, from EC2 instances, storage services (Amazon Simple Storage Service (S3), Amazon Elastic Block Store (EBS), Amazon Elastic File System...