Guest:
- Elliott Abraham, Security and Compliance Specialist @ Google Cloud
Topics:
- We talk about lift and shift vs cloud native, what are these and are they fair characterizations?
- Is lift and shift always negative? Does it always harm security?
- Are security planning needs different between them?
- What are the fundamentals with security during cloud migration that you have to get right regardless?
- What’s your advice to a security team to help make a migration work well?
- How do you account for threat model differences in the cloud? Are cloud threats being more different or more the same to the classic ones?
Resources:
- “Google Cloud security foundations guide”
- "The Phoenix Project" book
- "Threat Models and Cloud Security" (ep12)
- "Preparing for Cloud Migrations from a CISO Perspective" Part 1 (ep5) and Part2 (ep11)