5 risks in the cloud and how to manage them

The new technologies have completely transformed the way we store and manage information. One of the most important milestones has been the use of the cloud, which makes it possible to dispense with physical storage and access more flexible and economical environments.

More and more companies are migrating their data or their users' data to cloud services. However, while the cloud offers many advantages, it also poses risks that should not be overlooked.

Who is in charge of cloud security?

Before discussing specific risks, it is key to understand the Shared Responsibility Model, as outlined by Amazon Web Services (AWS). This model states that:

• The cloud provider is responsible for infrastructure, virtualization, host operating system and physical security.
• The customer is responsible for the guest operating system, applications, firewall configuration and data protection.

This means that cloud security is neither total nor automatic, and that migrating data brings new challenges. Let's take a look at the five main risks and how to deal with them.

1. Data leakage

One of the most common risks is the exposure of sensitive data. If adequate measures are not implemented, stored information can be intercepted by attackers. How can this be prevented?

• Database-level encryption, so that stolen data cannot be interpreted without the proper keys and passwords.
• Secure authentication protocols, such as SSL/TLS version 1.2 or higher. Earlier versions are vulnerable.

2. System vulnerabilities 

Moving critical processes to the cloud requires systems to be up-to-date and protected. Many times, attackers exploit vulnerabilities in the operating system, applications or code. Recommendations:

• Secure authentication protocols, such as SSL/TLS version 1.2 or higher. Earlier versions are vulnerable.
• Regularly update systems and applications.
• Update security patches as soon as they become available.
• Use scanning tools to detect vulnerabilities.
• Implement a WAF (Web Application Firewall), and reinforce security with virtual firewalls such as Palo Alto Networks in EC2 instances.

3. Credential Theft

Using weak or poorly managed passwords is one of the most frequent causes of unauthorized access. In addition, many organizations fail to revoke permissions on time when employees change roles or leave the company.

An infamous case was the Anthem breach, where more than 80 million records were exposed. The lack of multi-factor authentication and data encryption led to a class action lawsuit and a USD 115 million settlement. Best practices:

• Implement multi-factor authentication (MFA).
  
• Monitor networks for suspicious activity.
  
• Apply the rule of least privilege: give only necessary access.
  
• Revoke permissions and delete inactive accounts.
  
• Change passwords every 45 days.
  
• Use federated identity solutions, such as WAF Cognito.

4. Permanent loss of information

Even if data is in the cloud, it still depends on physical infrastructure. Technical failures or natural disasters can cause irreversible losses if there is no backup. What to do:

• Distribute data across multiple availability zones.
• Make frequent backups, for example, with AWS Storage Gateway.
• Use recovery solutions such as Amazon S3 Glacier, which allows you to restore information quickly and flexibly.

5. Denial of Service (DoS) attacks 

DoS attacks seek to saturate system resources, preventing legitimate users from accessing them. In the cloud, this also generates additional costs for the customer, as processing is charged on a per-consumption basis. To protect yourself:

• Use services such as AWS Shield, which offers free automatic protection (Standard version) against network and transport attacks.

Conclusion

Migrating to the cloud brings great benefits, but also challenges. The key is to be aware of the risks, assume the corresponding responsibilities and count on expert allies.

At Netdata, we accompany you in every step of the process, providing you with the necessary tools for a safe and efficient migration, aligned with your digital transformation goals.

Want to learn more about how to move to the cloud securely?

Our team is ready to help you.