Automating Security

(OBJ 4.7)

Automating Security

• Helps prevent security vulnerabilities, respond to threats swiftly, and maintain consistent security policies
• It involves using technology to perform crucial but repetitive security tasks to maintain updated defenses and swift response to security threats
• Automation includes the use and configuration of guardrails, security groups, service access management, and permissions

Ways to Automate Security

• Implementing Guardrails
  • Guardrails are automated safety controls to protect against insecure infrastructure configurations
  • Configured according to security standards and enforce security policies automatically
  • Continuously monitor infrastructure, detect security violations, and take predefined corrective actions
    • Predefined corrective actions can involve
      • Revoke permissions
      • Reconfigure components
      • Isolate infected workstation
• Managing Security Groups
  • Security groups act as virtual firewalls for cloud-based server instances
    • Control incoming and outgoing network traffic
  • Specify allowed incoming and outgoing network traffic using predefined rules
  • Automate assignment of instances to appropriate security groups
  • Dynamically adjust security group configurations to respond to evolving threats
  • Analyze traffic for unauthorized access attempts
• Enabling and Disabling Services and Access
  • Automate service access management to prevent unnecessary risks and maintain operational efficiency
  • Regularly review and manage access to services
  • Monitor for unusual activity and automatically restrict or disable access if suspicious
  • Automatically enable or disable services based on a predefined schedule when not continuously needed
• Automating Permissions Management
  • Manage permissions using Role-based Access Controls (RBAC)
  • Automate provisioning and de-provisioning of access rights based on assigned roles
    • Manages user permissions for onboarding, transfers, and departures
  • Ensure no unauthorized access to sensitive information
  • Perform regular checks on permissions settings to verify compliance with policies and regulations
  • Make necessary adjustments over time to maintain security