...
Shared Security Responsibility Model
CloudAdminsSupport Team | Project System Administrators |
Application Layer |
•Monitor application authentication - Monitor tenant applications for security compliance and provide recommendations for remediation
|
•Install- Install/configure applications in a secure fashion
|
•Create - Create and update passwords to meet NASA guidelines
|
Container Layer |
•Implement - Implement Container Registry for storage of approved Containers
|
•Store - Update Infrastructure Containers to resolve identified vulnerabilities
| - Store approved Containers in approved Container registries
|
•Update - Update Containers to resolve identified vulnerabilities
|
O/S Layer |
•Monitor instances - Monitor resources for security compliance and provide notifications for required patches
|
•Read - Read and understand vulnerabilities from weekly vulnerability reports
|
•Configure - Configure secure instances and implement patches as required
|
Cloud Layer |
•Ensure - Ensure SSM usage, monitor ports, and ensure Password / API key age compliance
|
•Coordinate ISSO attestation - completion of User Agreement
|
prior to the creation of AWS/Azure users- and Security Training as part of onboarding process
|
Physical Layer |
•AWS - AWS and Azure provide secure facilities, hardware, and other capabilities
|
Secure Science Cloud Web Hosting Guidelines
...
