Cloud security consists of technologies and procedures, implemented to address security of all your cloud assets, including cloud computing instances, data storage, gateways, load balancers, databases, and various APIs or endpoints of cloud services. To ensure security, your entire cloud attack surface must be assessed for various misconfigurations, such as excessive access permissions or insecure IAM policies.
The first step to checking the cloud security is getting a comprehensive view of all your cloud assets. The free Community Edition Cloud Security Test can search for your exposed cloud storage in AWS, Azure, GCP and other public cloud service providers (CSP) around the globe. With it you can detect shadow cloud storage or unwarranted cloud usage that may violate compliance requirements.
It means that the cloud storage (e.g. AWS S3 bucket) is publicly accessible to any remote non-authenticated user, and anyone can view the files inside the storage. In most cases, this indicates a misconfiguration in the access permissions of the storage, and should be addressed as soon as possible.
