Enterprise Cloud Security Augmented by AWS Cloud Protection

Enterprise Cloud Security Augmented by AWS Cloud Protection.

In era of rapid digital transformation, when every organization is navigating the cloud journey, one of the major challenges they encounter is to ensure security of the workloads throughout the entire cloud migration life cycle (before migration – during migration – after migration). The primary challenges enterprises face vis-à-vis cloud security include constantly evolving cloud threat vectors, de-centralized view of cloud security posture, managing runtime security vulnerabilities, and blending security with speed of cloud transformation.

LTM’s Enterprise Cloud Security Offering is augmented by AWS Cloud Protection and provides end-to-end managed security services to enable organizations to navigate their cloud transformation journey in a secured, accelerated, agile manner.

LTM’s Cloud Security Offering

• Cloud Security Posture & Risk Management (CSPRM)
• Container Security & Risk Management
• Cloud Workload Protection & Risk Management (CWPRM)
• Cloud Defense SIEM (Guard Duty)

Key Service Features

Cloud Security Posture & Risk Management (CSPRM)

• Security & regulatory compliance hygiene
• Policy engine / Security control framework
• Scan, detect, auto-response
• IAM & network hygiene
• Encryption, data classification

Cloud Workload Protection & Risk Management (CWPRM)

• Depth / breadth protection
• Vulnerability management, WAF / DDoS
• Patching, endpoint security
• Security incident detection
• Securing Key / Secret / Certificate

Container Security & Risk Management

• Protecting container / EKS / ECR
• Container image vulnerability scan
• Container hardening, Pod security
• Trusted image assurance
• Security incident detection (cluster, node)

Cloud Defense SIEM – Guard Duty

• Data lake, Logging / audit
• Detection engine
• Integrate ITSM, SOAR, Playbook
• Threat Hunting, IoC / IoA
• Security incident management

Our Value Proposition

• Visibility and Coverage
  Real-time, centralized 360-degree view for entire cloud estate.

• Workload Security-by-Design
  Secure landing platform with zero-trust network architecture, blueprint, and templates for protecting cloud resources from external/internal attacks and data breaches.

• Delivering Workload Compliance
  Assurance of workloads compliant with security and regulatory standards. Strengthens security hygiene, IAM hygiene, network hygiene, zero-trust architecture, endpoint hygiene, IoT security hygiene, and Kubernetes/container registry hygiene.

• Managing Workload Protection
  Secured endpoint protection with best-in-class EDR/AV and vulnerability scanning solutions.

• Prevention from Data Leakage
  Assurance of data security by applying encryption (at-rest, in-transit) and data leak prevention policies.

• Protection from Unauthorized Access
  Elimination of over-permissive, deprecated, external user access to workloads.

• Handling of Security Incident
  Real-time incident monitoring and response through customized MITRE ATT&CK detection rules, playbooks, workbooks, threat intelligence, and UEBA.

• Automation, Speed & Efficiency
  Real-time, fully automated security incident/event/hygiene detection, qualification, and response with SOAR, Playbook, Workbook, and policy engine.

AWS Cloud Security – Technology Landscape

• Security Hub, SCP
• AWS Config, Lambda
• Trusted Advisor
• Detective
• Audit Manager
• Clair, EKS, ECR
• System Manager
• Patch Manager
• Access Analyzer
• Inspector, Macie
• Guard Duty
• CloudTrail
• CloudWatch
• AWS Shield, WAF
• KMS, Secret, VPC

Partner Ecosystem

• Amazon
• Check Point Software Technologies Ltd.
• Radware
• Qualys
• Microsoft