Cloud Native Security

Written by two industry veterans with over twenty years of IT experience, Cloud Native Security contains niche know-how and hard-won technical knowledge.

The main author Chris Binnie is a cloud native security consultant with almost thirty years of experience in IT security. He specialises in cloud native security, Linux server hardening, and DevSecOps practices.

Seasoned writer Chris Binnie has authored multiple cybersecurity books including Linux Server Security: Hack and Defend and has been a writer for Linux Magazine and ADMIN Magazine for around 15 years. He founded a colocation business in 2001 with six bandwidth providers across two data centres to achieve zero downtime, and designed and then built a media streaming platform in 2012 to serve HD video to 77 countries with live sports and music events.

Co-author Rory McCune created NCC Group's Mastering Container Security course and regularly presents on Kubernetes security at international conferences.

The book collects their combined experience across 20 chapters of invaluable knowledge.

To whet your appetite, there are some notes in GitHub that could loosely be described as security guides, however use the information that they contain with care, treating it as untested. There is a Linux Server Security page that looks at focusing on starting as you mean to go on with server and workstation builds.

Another guide focuses solely on AWS security, using the AWS CLI, which could be translated into Terraform potentially. It can be found in GitHub at the following page: AWS Cloud Security. Many of the cloud security principles covered apply equally to other cloud providers, such as GCP and Azure.

There is also a guide on Kubernetes Security. It looks at the need for considered RBAC settings, network policies, cluster security and compliance, secrets management, image signing and admission controller configuration among several other important topics.