Using Linux Securely in the Cloud
summary
Covers concrete hardening steps: keep package sets minimal, use package managers or orchestration (satellite/catello, Ansible/Chef/Puppet/Salt) and cloud tools like aws Systems Manager to enforce state; inspect and disable services with commands shown (example using systemctl stop/disable to remove an NFS server); apply security groups, network ACLs, or host iptables appropriately; centralize logs with ELK/CloudWatch/Splunk and patch aggressively—zdnet claim quoted: one in three exploits comes from unpatched servers; enable SELinux and test rollback procedures.
AI-written summary · about
chapters (20)
- 0:00Introduction
- 1:10Agenda
- 2:00Logging
- 3:20About Thomas Cameron
- 4:05Securing Linux
- 7:25Package Sets
- 9:15OS Provider Tools
- 10:15Souza Manager
- 11:15AWS System Manager
- 11:50Azure Automation Tool
- 14:20Service Management
- 18:20Firewalling
- 21:15Firewall Services
- 23:25Network ACLs
- 27:00Log Analysis
- 29:30User Management
- 34:00Patching
- 35:40Security Enhanced Linux
- 38:00Conclusion
- 39:10Questions
related talks
49mTips and Tricks: Protecting Cloud Infrastructure
48mSecurity today: change your habits and make it safer and efficient
16mSecuring your Cloud infrastructure: a first baseline
41mIdentifying and Mitigating Cloud and Container Threats
41mArchitecting for Security in the Cloud
01h 02mStrong security made simple: Putting all the pieces together
24mCracking the Code of Cloud Security
18mSecuring cloud innovation: Lessons learned