Private networking does not automatically mean trusted
Putting something on a private network narrows who can reach it. It does not make the callers trustworthy.
Anything already inside, including a compromised workload or a supplier's connection, is inside. Private networking is a reduction in exposure, and treating it as authentication is how service-to-service traffic ends up with no identity checks at all.
More on Cloud resilience
- Multi-region is not the same as multi-providerTwo towns, one mains
- Autoscaling can scale a failure tooIt copied the mistake
- Managed services move responsibility, not all riskThe van takes the machines
- Egress is part of the cloud security boundaryWatch the loading bay
- Snapshots can copy sensitive data silentlyThe copy keeps nothing
- Serverless still has an attack surfaceThe box went, the openings stayed