Securing file storage
File storage is a piece of storage such as the on-premises network-attached storage (NAS).
Each cloud provider has its own implementation of file storage, but at the end of the day, the basic idea is the same:
- They offer support for common file-sharing protocols (such as NFS and SMB/CIFS)
- They can mount a volume from a managed file service into an operating system to store and retrieve files for multiple VMs in parallel
- They can control access permissions to the remote filesystem
- They enable automatic filesystem growth
In the following diagram, we can see how a VM is connecting to a remote file storage, using the NFS protocol for Linux VMs:
Figure 5.3 – VM connecting to an NFS storage
General best practices for securing file storage
Regardless of the cloud provider you are using when using file storage, you should follow these best practices:
- Use IAM services to control who can access...
