This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Cloud-10 Guidelines"
From OWASP
Vinaykbansal (talk | contribs) (→Target Providers) |
Vinaykbansal (talk | contribs) (→Timelines) |
||
| Line 44: | Line 44: | ||
== Timelines == | == Timelines == | ||
| − | 1. Initial Draft from Shankar - Nov | + | 1. Initial Draft from Shankar - Nov 29nd |
| − | 2. Initial Draft from Vinay - | + | 2. Initial Draft from Vinay - Dec 9th |
Revision as of 14:24, 1 November 2011
Guideline Document
1. Development / Environment Setting
a) Developer Access
- Jump Server
- Multi factor Autch
- VPN/Cert based Authc
2. Architecture
- Tiering
- Communicaiton
- between zones
- within tiers
- ACLs
- AuthC/Identity
- Encryption
- WAF
3. Deployment and Testing
- Hardening
4. Operations
- Patching
Use Cases
- Deploying Third Party
- Building Your Own Application
Target Providers
- Savvis - Shankar
- Amazon EC2 - Vinay
- Google Apps - Pankaj
Timelines
1. Initial Draft from Shankar - Nov 29nd
2. Initial Draft from Vinay - Dec 9th
