BUILDING A CLOUD SECURITY ROADMAP: TOOLS BY LAYER AND WHEN YOU NEED THEM

Summary from the TLDR InfoSec newsletter

This post provides an overview of the layers in cloud environments, the threats that target each layer, and the tools that are best suited to address them. The cloud infrastructure/control plane layer handles tasks such as resource provisioning, configuration management, and user permissions. The orchestration layer hosts platforms such as Kubernetes and related services live, whereas the platform layer runs more generalized workloads. Finally, the application layer includes software that end-users rely on, such as custom web applications, APIs, and SaaS apps.