nar3k
1d60273d3f
Update README_RU.md
|
vor 2 Jahren | |
|---|---|---|
| auditlogs | vor 2 Jahren | |
| auth_and_access | vor 2 Jahren | |
| configuration | vor 2 Jahren | |
| encrypt_and_keys | vor 2 Jahren | |
| kubernetes-security | vor 2 Jahren | |
| malware-defense | vor 2 Jahren | |
| network-sec | vor 2 Jahren | |
| secure_ci_cd | vor 2 Jahren | |
| vuln-mgmt | vor 2 Jahren | |
| yandex-Cloud-Security-Checklist | vor 3 Jahren | |
| .gitignore | vor 3 Jahren | |
| README.md | vor 2 Jahren | |
| README_RU.md | vor 2 Jahren |
README.md
🔐 Yandex.Cloud Security Solution Library
Yandex.Cloud Security Solution Library is a set of examples and recommendations collected in a public repository on GitHub. Its purpose is to help companies build a secure infrastructure in the cloud and meet the requirements of various regulators and standards. Yandex.Cloud team has selected the most common tasks that arise when building security in the cloud. They have tested and described relevant scenarios in detail.
Brief webinar
☑️ Yandex.Cloud Security Checklist
Checklist for security in the Yandex.Cloud infrastructure
https://cloud.yandex.com/en/docs/overview/security/domains/checklist
List of solutions
- 🕸 Network security
- Example of setting up Security Groups (dev/stage/prod): Terraform
- Example of installing a VM instance with a firewall (NGFW): Check Point
- Example of installing two VM instances with an NGFW Check Point: Active-Active
- Example of installing two NGFW Check Point VMs: Active-Passive
- An example of creating a site-to-site VPN connection to Yandex.Cloud: Terraform
- 🔑 Authentication and access control
- 🦠 Protection against malicious code
- 🐞 Vulnerability management
- 🔏 Data encryption and key and secret management
- 🔎 Collecting, monitoring, and analyzing audit logs
- Collecting, monitoring and analyzing audit logs in Yandex Managed Service for Elasticsearch (ELK)
- Collecting, monitoring, and analyzing audit logs in an external SIEM ArcSight
- Collecting, monitoring, and analyzing audit logs in an external Splunk
- Use cases and important security events in audit logs
- Trails-function-detector: Alerts and response to Information Security events in Audit Trails using Cloud Logging and Cloud Functions + Telegram
- Monitoring Audit Trails and events in Yandex Cloud Monitoring
👮 Secure configuration
Kubernetes security
- Authentication and access control in Managed Kubernetes:
- Example of setting up role-based models and policies in Yandex Managed Service for Kubernetes
- Collecting, monitoring, and analyzing audit logs:
- Analyzing K8s security logs in ELK: audit logs, Policy Engine, Falco
- Exporting Cilium Flow Logs to Object Storage (S3)
- Data encryption and key/secret management in Managed Kubernetes
- Secret Management with Secret Manager (Lockbox, Vault)
- Secure configuration of Managed Kubernetes:
- Osquery and kubequery in K8s: Osquery (protecting K8s nodes), kubequery (analyzing the configuration of the entire K8s)
- CVE mitigations:
- CVE-2022-0185
- CVE-2021-4034
- Feature comparison table of k8s security solution
- Starboard integration with Yandex Cloud Container Registry to scan running images
<img src="https://logowik.com/content/uploads/images/gitlab8368.jpg"
alt="Kubernetes logo" title="Kubernetes" height="50" width="50" />
- CI/CD Security
<img src="https://upload.wikimedia.org/wikipedia/commons/thumb/8/83/Telegram_2019_Logo.svg/1200px-Telegram_2019_Logo.svg.png"
alt="Kubernetes logo" title="Kubernetes" height="50" width="50" />
Feedback
- Improvements, bugs, contribute: Please start using github issue/pr
- Questions, wishes, consultations: Write to us in telegram https://t.me/YandexCloudSecurity
Reference architecture
