[colug-432] Cloud services and security

Joshua Kramer josh at globalherald.net
Mon Feb 7 13:08:38 EST 2011


> Any colug'ers have experience with maintaining security with cloud
> services?  We firewall everything inbound and outbound for our DMZ

What failure modes are you trying to protect against?

Random servers consuming your web services?

Or someone "stealing" (copying) your machine images from EC2 and launching 
them in a random location?

You could use client certificate authentication if "stealing your machine" 
is not a concern.


More information about the colug-432 mailing list