Cloud misconfiguration is an often-overlooked and increasingly prominent cloud security risk. It’s also one of the most straightforward and preventable. Cloud misconfiguration refers to the improper setup, or configuration, of a cloud product and is a result of human error.
Cloud service providers handle the back-end and hardware aspects of their product, so many companies assume they’re also responsible for configuration and all aspects of security. Often, though, responsibility for configuration falls to the user. This misunderstanding can lead to misconfigurations.
Several prominent security incidents have recently brought cloud misconfigurations into the spotlight.
In December of 2017, a cybersecurity company found that data analytics firm Alteryx had left an Amazon Web Services (AWS) S3 cloud storage bucket open to the public, exposing the data of 123 million Americans. The data included contact information, addresses and financial histories.
In June, Google issued a warning to users of Google Groups, reminding them to ensure they set their groups to private. They issued the warning after researchers discovered 9,600 Google Groups with public settings, a third of which leaked sensitive information. The organizations using these Google Groups included hospitals, universities and government agencies.
In a recent survey of IT and security professionals, 62 percent of participants named misconfiguration as the top security threat. According to another survey, nine in 10 IT professionals are concerned about security risks caused by misconfiguration, but less than a third of them continuously check for them.
How to Prevent Cloud Misconfigurations
Since cloud misconfigurations are caused by human error as opposed to purposeful attacks, there are some fairly straightforward ways to prevent it. While simple, these strategies do require some extra time and effort, but it’s worth it to protect your data.
Provide Training
Training is a powerful tool for preventing misconfigurations. It’s vital that all employees who will change the settings of your cloud systems receive training in relevant cybersecurity issues. Before launching a new cloud-based tool, those who will manage the system should take the time to get to know if it works thoroughly.
Check Credentials and Permissions
Companies using cloud-based products should check all permissions and credentials before using them, rather than relying on the default settings. They should check that access is limited to those who should have it. Those using AWS should check the permissions of their S3 buckets. Enabling multi-factor authentication can also help keep unauthorized users out.
You may want to consider the use of a cloud access security broker (CASB), a software service or tool that monitors traffic between the user’s devices and the cloud service to ensure it complies with all relevant security policies.
Watch for Misconfigurations
Companies should continuously monitor their cloud systems for misconfigurations. Users may change settings and accidentally expose data at any time. It is especially hard to spot these changes when a large number of users have access to the product. Because of this risk, continuous monitoring is necessary.
Follow Best Practices From Providers
Most cloud service providers offer best practices for how to use their product. AWS, for example, recommends enabling two-factor authentication and not using root accounts for projects. Following these suggested practices may create some extra work, but it’s important for protecting your data.
Take Other Cybersecurity Measures
Implementing basic cybersecurity measures such as logging, encryption and network segmentation can also help to protect companies’ data. Vulnerability and penetration tests can also be useful. For some cloud services, you need to get the permission of the provider before running these tests. Consider the security features offered by a cloud provider before choosing their product. Some integrate these features into their system, making it easier for you to protect your data.
Relatively simple mistakes may cause the cloud misconfigurations, but they can have severe consequences. It’s crucial that companies take this threat seriously and take steps, such as those listed above, to protect their data from accidental leaks.
##
About the Author
Kayla Matthews is a tech-loving blogger who writes and edits ProductivityBytes.com. Follow her on Twitter @productibytes to read all of her latest posts!
