Independent marketplace for cloud provider accounts across 22 providers

Cloud Journal

Cloud Journal

Practical, provider-accurate writing on cloud infrastructure, developer workflows, security fundamentals and the decisions behind choosing a cloud.

Diagram of cloud IAM principals, policies and roles granting scoped access to resources
Security Fundamentals

Cloud IAM Fundamentals: Users, Roles and Least Privilege

Identity is the perimeter in a cloud account. This guide explains the four IAM building blocks every provider shares, maps…

6 min read
Application credentials being issued, stored, rotated and revoked through a managed secret store
Security Fundamentals

Managing API Keys and Secrets in Cloud Projects

Credentials have a lifecycle, and most teams have gaps at rotation and revocation. This guide compares storage options, covers safe…

6 min read
Data encrypted on cloud storage and over the network with keys held in a key management service
Security Fundamentals

Encryption at Rest and in Transit

The two phrases are quoted together and defend against different things. This guide separates the threats, explains key custody and…

6 min read
Cloud account activity records being delivered to a tamper evident central log archive
Security Fundamentals

Audit Logging in the Cloud: CloudTrail, Activity Logs and Beyond

Audit logs are the only thing that answers what happened, when, and under whose identity. This guide covers control plane…

6 min read