oddbjorn/cloudsec

A curated list of cloud security resources

cloudsec

A curated list of cloud security resources

• General

  • Cloud Security Alliance (CSA)
    • Cloud Control Matrix (CCM)
    • FinCloud Security
      • Webinars
      • Mapping the Cloud Controls Matrix (CCM) 4.0 to PCI DSS 4.0
      • State of Financial Services in Cloud (2023-05-06)
  • Cloud Native Computing Foundation (CNCF)
  • European Cloud User Coalition (ECUC)
    • Checklist 1.0 (pdf + xlsx)
    • Position Paper 2.1
  • ENISA
    • European Cybersecurity Certification Scheme for Cloud Services , with EBF statement (pdf)
    • Cloud Cybersecurity Market Analysis (pdf)
  • Center for Internet Security (CIS)
    • CIS Benchmarks

• Azure

  • Security
  • Cloud Security Benchmark

• AWS

  • Security
    • Well-Architected Framework Security Pillar (pdf)
    • Security Reference Architecture (AWS SRA)
    • Security Maturity Model
  • Compliance
  • Security Services Best Practices

• Kubernetes

  • KubeCon + CludNativeCon

• Threats

  • Open Cloud Vulnerability and Security Issue Database

• Newsletters

  • Clint Gibler’s tl;dr sec
  • Marco Lancini’s CloudSecList

• Books