Cloud Security Command Center is now in beta and ready to use

By Anonymous -

Security hero

If you’re building applications or deploying infrastructure in the cloud, you need a central place to help understand your security posture, put it in a business context, and act on changes. In March, we announced Cloud Security Command Center in alpha, becoming the first major cloud provider to offer organization-level visibility into assets, vulnerabilities, and threats. Starting today, this security service is available to Google Cloud Platform (GCP) customers in beta.

This beta release comes with a number of new features, including:
  • Expanded coverage across GCP services including Cloud Datastore, Cloud DNS, Cloud Load Balancing, Cloud Spanner, Container Registry, Kubernetes Engine, and Virtual Private Cloud
  • 13 IAM roles added for fine grained access control across Cloud SCC
  • New examples of how to generate notifications when changes occur, or to trigger Cloud Functions from a Cloud SCC query
  • Ability to view and search for new, deleted, and total assets over a specified time period
  • Expanded client libraries including Java, Node, and Go
  • Expanded capabilities to manage asset discovery
  • Self-serve onboarding via GCP Marketplace
  • Self-serve partner security sources, such as Cavirin, Chef, and Redlock, via GCP Marketplace

Cloud Security Command Center (Cloud SCC) provides security teams with insight into infrastructure, configuration, application and data risk so that you can quickly address vulnerabilities, mitigate threats to your cloud resources and evaluate your overall security posture. With Cloud SCC, you can view and monitor an inventory of your cloud assets, be alerted to security anomalies, scan cloud storage to discover where you are storing sensitive data, detect common web vulnerabilities, and review access rights to your critical resources, all from a single, centralized data platform and dashboard.

Cloud Security Command Center gives us unprecedented visibility into the security posture of our VM instances and containerized workloads running within GCP. With this security service, we can quickly review and assess risks across all our GCP assets.Alexander Schuchman,
Director Information Security, Colgate-Palmolive

Cloud SCC is the best way to get started assessing and remediating security risks in your GCP environment. Here are three ways to use the service today:

1. Assess security risks and vulnerabilities
The Cloud SCC dashboard presents findings that help you quickly uncover security risks and potential vulnerabilities and threats. For example, you can view which Cloud Storage buckets are publicly accessible, identify VMs with public addresses, discover overly permissive firewall rules, and be alerted to instances that may have been compromised to perform coin mining. You can also easily see if users outside of your designated domain, or GCP organization, have access to your resources.

Use Cloud SCC to quickly discover non-org owners with access to GCP resources

With Cloud SCC, you can uncover VMs that are exposed to the internet

2. View and act on changes to your GCP assets
Cloud SCC gives you a comprehensive inventory of your cloud assets across numerous GCP services including App Engine, Cloud Datastore, Cloud DNS, Cloud Load Balancing, Cloud Spanner, Cloud Storage, Compute Engine, Container Registry, Kubernetes Engine, and Virtual Private Cloud. You can also view the inventory of your service accounts.
Using asset inventory, you can view resources for the entire GCP organization or just for particular projects. Cloud SCC performs ongoing discovery scans, allowing you to see asset history to understand exactly what’s changed in your environment and act on unauthorized modifications. With the assets display, you can see new, deleted, and total assets for a specified time period.
You can also generate notifications when changes occur and trigger Cloud Functions from a Cloud SCC query. For example, you can configure an action to automatically detect policy changes on a network firewall and then restore it back to a secure state, or detect when a Cloud Storage bucket becomes publicly accessible and then revert back to private access.

3. Integrate security findings from Google and other cloud security leaders
Cloud SCC is a flexible platform that integrates with Google Cloud security services such as Data Loss Prevention (DLP) API, Forseti, Cloud Security Scanner, and anomaly detection from Google as well as with third-party cloud security solutions from vendors such as Cavirin, Chef,  and Redlock. By integrating partner solutions with Cloud Security Command Center, you can get a comprehensive view of risks and threats all in one place without having to go to separate consoles. You can also jump from the Cloud SCC dashboard directly into these third-party tools to help speed remediation efforts.

Cloud SCC integrates with leading third-party cloud security vendors

Cloud SCC can help you get a better handle on the security of your GCP environment today.  Visit the Cloud SCC webpage for a product overview and documentation. You can start using Cloud SCC today, straight from GCP Marketplace.

Andy Chang
Senior Product Manager, Google Cloud






Follow us on -

Our Website - http://fcpl.biz/ Our Facebook page - https://lnkd.in/f6JpUPi?
Our LinkedIn page - https://www.linkedin.com/company/finetech-consultancy/ Talk to our experts - 071 0326326









Comments

Post a Comment

Popular posts from this blog

Top 10 apps made using AppSheet

By Anonymous -
Image
AppSheet being a no code platform has been able to provide innovative and creative applications for many organizations, and these applications have turned out to be very successful. Today we bring to you 10 most innovative and useful applications created using AppSheet ranging from non-profit organizations to global powerhouses. 10. Rotary International Rotary International is a service organization that brings together pioneers in professional and business industries in aid of upholding world peace. In 2017 when hurricane Maria hit the Caribbean Islands, Rotary International dived into action to support the affected. They provided food, water, clothing, medicine and shelter to those affected in many areas. Managing the resources during this crisis was extremely difficult, therefore Rotary decided to develop an application using AppSheet to keep in contact with members in any area and keep track of supplies. With the use of this app Rotary was able to immediately distribute needed supp...
Read more

Refresh BigQuery data in Sheets using Apps Script and Macros

By Anonymous -
Recently the BigQuery data connector was released to enable clients to effectively import information from bigger datasets into Sheets. Presently, you can utilize devices like Apps Script and the large macro recorder to plan automatic updates inside Sheets to the associated BigQuery data. Reasons to use it Remain over the best in class information crucial to your business via automatically refreshing the BigQuery information in your sheet. For instance, you can set sales data to automatically refresh with the goal that it's prepared for analysis toward the start of every day. You can likewise auto-refresh information in preparation of key meetings or introductions that happen on a weekly or monthly basis. Or on the other hand you could set a trigger to auto-refresh your information each time you open the spreadsheet. This feature will be ON by default. When you compare data in Sheets and BigQuery, the following procedure should be adopted. To compare data, you mig...
Read more

What’s new with Google Cloud

By -
Image
Want to know the latest from Google Cloud? Find it here in one handy location. Check back regularly for our newest updates, announcements, resources, events, learning opportunities, and more.  Week of Nov 30-Dec 4 2020 Google enters agreement to acquire Actifio —Actifio, a leader in backup and disaster recovery (DR), offers customers the opportunity to protect virtual copies of data in their native format, manage these copies throughout their entire lifecycle, and use these copies for scenarios like development and test. This planned acquisition further demonstrates Google Cloud’s commitment to helping enterprises protect workloads on-premises and in the cloud.  Learn more . Traffic Director can now send traffic to services and gateways hosted outside of Google Cloud —Traffic Director support for Hybrid Connectivity  Network Endpoint Groups  (NEGs), now generally available, enables services in your VPC network to interoperate more seamlessly with services in other en...
Read more