Snapshots can copy sensitive data silently
A snapshot is a complete copy of a disk, created in seconds, frequently with different permissions from the original.
They are taken for backups, for troubleshooting, for cloning environments, and they persist long after the reason. A snapshot shared too widely, or copied to another account, is a copy of your data outside every control you applied to the source, and nothing about it looks like a data transfer.
More on Cloud resilience
- Multi-region is not the same as multi-providerTwo towns, one mains
- Autoscaling can scale a failure tooIt copied the mistake
- Managed services move responsibility, not all riskThe van takes the machines
- Private networking does not automatically mean trustedNobody asks twice
- Egress is part of the cloud security boundaryWatch the loading bay
- Serverless still has an attack surfaceThe box went, the openings stayed