This is not a Top 10 list \u2013 it is a list of 10 things I\u2019ve learned along the way. Top 10 lists imply some sort of universal knowledge of the \u201ctop\u201d things possible in a given field. Top 10 attractive women, top 10 guitar players, top 10 whatever, they all have one thing in common: They are all ten things the author thinks are the best. I don\u2019t really like to think I know everything so this list is in no particular order. This particular list is on cloud security and, well, it is a big topic that interests me greatly and there is no way I can cover it all in a blog post. As a result I will be doing a presentation around this topic in a few places, including BSides Cleveland.
\nAnyway, cloud security is tough for a lot of reasons, not least of which is because you, like me, probably only understand the basics of what you interface with in the cloud \u2013 the controls the cloud provider allows you to see. This lack of depth of management introduces many security related challenges. <\/p>\n