Cloud Security
Service Principal Credential Compromise Response
Service principal credential compromise response maps added credentials, token issuance, permissions, resource access, persistence, containment, and recovery.
Category
Cloud Security
Practical guidance for securing cloud identities, workloads, control planes, and shared operational responsibilities.
6 resources
Resources in this category
Browse all resources
Cloud Security
Public Cloud Storage Exposure: Prevention and Response
Public cloud storage exposure detection evaluates effective policies, ACLs, access points, anonymous requests, sensitive objects, change actors, and recovery.
Cloud Security
Cloud KMS Key Deletion: Detection and Recovery
Cloud KMS key deletion detection covers destructive requests, recovery windows, dependency mapping, unusable ciphertext, purge controls, and restoration.
Cloud Security
Kubernetes Service Account Token Theft
Detect Kubernetes service account token theft through token claims, pod identity, API audit events, RBAC scope, audience, and workload behavior.
Cloud Security
AWS IMDSv2: Detect Credential Theft
Detect AWS IMDSv2 credential theft with metadata configuration, CloudTrail evidence, GuardDuty findings, and staged EC2 hardening.
Cloud Security
Cloud Shared Responsibility and Operational Ownership
Translate cloud shared responsibility into testable ownership for identity, configuration, workloads, SaaS integrations, evidence, and recovery.