Cloud Configuration Management
What is Cloud Configuration Management?
Processes and tools for maintaining secure and compliant configurations of cloud resources, preventing misconfigurations that lead to data exposure.
Terms that appear alongside cloud configuration management
Each of these is named in at least one of the same controls as cloud configuration management. The number is how many controls name both.
- configuration management 8 shared controls
- cloud infrastructure security 5 shared controls
- infrastructure security 5 shared controls
- container security 3 shared controls
- cloud security posture management 3 shared controls
- cloud security 3 shared controls
- security posture 3 shared controls
- cloud security posture management cspm 2 shared controls
Frameworks that govern cloud configuration management
What the standards actually require on cloud configuration management
Requirements naming cloud configuration management across 4 standards, quoted from the control text.
Cloud configuration management. Control from NIST SP 800-190 framework, domain: NIST SP 800-190: Cloud Infrastructure Security.
NIST190-20 · Cloud configuration management →ISMAP Cloud Infrastructure controls cover the underlying compute + network + storage + management plane. (1) Virtual Network Segmentation: VPC Virtual Private Cloud isolation + subnets + security groups + NACLs + microsegmentation + service mesh (Istio + Linke...
ISMAP-CloudInfrastructure-NetworkSegmentation-Container-Serverless-WorkloadProtection-Hardening-ConfigManagement · ISMAP Cloud Infrastructure - VPC Network Segmentation + Container/Serverless Security + Cloud Workload Protection (CWPP) + Image/Template Hardening + CIS Benchmarks + Configuration Management + IaC →Implement Logging and Monitoring + Compliance and Audit + Cloud Configuration Management + Cloud Security Monitoring + SLA Management per MTCS SS 584.
MTCS-Logging-Monitoring-Compliance-Audit-SLA-Configuration-SIEM-SOAR-Cloud-Monitoring-CSPM · MTCS Logging + Monitoring + Compliance + Audit + SLA + Configuration + SIEM + SOAR + CSPM →Apply Section 7.5 cloud workload protection covering CWPP (Cloud Workload Protection Platform - CrowdStrike Falcon + Trend Micro Deep Security + Wiz + Lacework + Orca Security + Aqua + Sysdig + Prisma Cloud) + image and template hardening (Packer + Hashicorp +...
NISTSP144-7 · Cloud Workload Protection, Containers, Serverless, and Configuration →Questions people ask about cloud configuration management
What is Cloud Configuration Management?
Why is Cloud Configuration Management important for compliance?
Which compliance frameworks address Cloud Configuration Management?
Where can I learn more about Cloud Configuration Management?
See how Cloud Configuration Management applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.