OWASP
Update: Secure_Cloud_Architecture Cheat Sheet
What is missing or needs to be updated?
The current sheet doesn't discuss the Shared Responsibility model.
How should this be resolved?
A shared security model basics section and an intro into self-managed vs managed tooling should be provided before the Self-managed tooling maintenance section.
The "basics" section will have a pros/cons section covering each level of management. Topics to be considered will be: level of control, complexity, cost/budget, flexibility, reliability, availability, etc.
An example will be given which discusses securing different types of tools at the same management level. CSP agnostic example: Securing a managed object storage vs securing a managed database (like S3 and DynamoDB).
Links
@szh I'm not sure what the formal process is here. Can I take the help_wanted tag off and move forward?
