Cybersecurity — API Security

Shared responsibility model

Cloud Provider: Infrastructure, physical security
Customer: Data, access, configuration

AWS security

import boto3

# Enable CloudTrail
cloudtrail = boto3.client('cloudtrail')
cloudtrail.create_trail(Name='my-trail', S3BucketName='my-bucket')
cloudtrail.start_logging(Name='my-trail')

# Enable GuardDuty
guardduty = boto3.client('guardduty')
guardduty.create_detector(Enable=True)

Azure security

import azure.mgmt.security

# Enable Security Center
security_client = azure.mgmt.security.SecurityCenter(...)

Best practices

1. Enable logging
2. Encrypt data
3. Use IAM roles
4. Monitor with SIEM
5. Regular audits

Cloud security tools

• AWS GuardDuty
• Azure Security Center
• GCP Security Command Center

Mini Practice

1. Enable cloud logging
2. Configure encryption
3. Set up IAM policies
4. Monitor with SIEM

Up Next

Continue with Container Security - Docker/Kubernetes security.