Episode description

Is the cloud secure? Richard chats with Screaming in the Cloud's Corey Quinn about the latest spate of security issues in AWS and Azure - and the responses to those issues. Corey talks about the risks the cloud providers are creating, not being clear when an exploit is found, to let people know how much visibility they have into the problem. Mitigating an exploit is not enough - you have to be able to answer the question about whether or not the cloud is secure. The alternatives are worse!

Links:

• CosmosDB Exploit
• Insecure AWS Buckets
• Azure Container Services Exploit
• Microsoft Zero Trust
• Amazon Zero Trust

Recorded September 9, 2021