Cloud security & audit services
Each cloud records what happens in an account, detects threats and controls who gets in, using its own services. Our team switches these on early, sends the logs to one place and decides who reads the alerts: AWS CloudTrail, Amazon GuardDuty and AWS IAM Identity Center on Amazon Web Services (AWS); Cloud Audit Logs, Security Command Center and Google Cloud IAM on Google Cloud; the Azure Monitor activity log, Microsoft Defender for Cloud, Microsoft Sentinel and Microsoft Entra ID on Microsoft Azure; and OCI Audit, Cloud Guard and OCI IAM on Oracle Cloud Infrastructure (OCI).
What we do
- Account-level audit logging turned on from day one
- Threat detection and posture findings routed to one place
- Workforce single sign-on into cloud accounts
- Web application firewall and DDoS layers
- Tamper-resistant log copies in write-once storage
- Access reviews for cloud administrators
Edge protection follows the same pattern: AWS WAF and AWS Shield Advanced, Google Cloud Armor, Azure DDoS Protection and the OCI Web Application Firewall.
This group supports Cybersecurity, Cloud Management and zero trust work. Product names are experience, not partnerships.
Leading platforms we work with
- AWS CloudTrail
- Amazon GuardDuty
- AWS IAM Identity Center
- AWS WAF
- AWS Shield Advanced
- Google Cloud Audit Logs
- Google Cloud Security Command Center
- Google Cloud Identity and Access Management (IAM)
- Google Cloud Armor
- Azure Monitor activity log
- Microsoft Defender for Cloud
- Microsoft Sentinel
- Microsoft Entra ID
- Azure DDoS Protection
- OCI Audit
- OCI Cloud Guard
- OCI Identity and Access Management (OCI IAM)
- OCI Web Application Firewall
Platforms and practices
- Log retention and export
- Alert routing and ownership
- Least-privilege access reviews
References
- AWS: AWS CloudTrail
- AWS: Amazon GuardDuty
- AWS: AWS IAM Identity Center
- AWS: AWS WAF, AWS Shield Advanced
- Google Cloud: Cloud Audit Logs
- Google Cloud: Security Command Center
- Google Cloud: IAM
- Google Cloud: Cloud Armor
- Microsoft Learn: Activity log in Azure Monitor
- Microsoft Learn: Microsoft Defender for Cloud
- Microsoft Learn: Microsoft Sentinel
- Microsoft Learn: What is Microsoft Entra?
- Microsoft Learn: Azure DDoS Protection
- Oracle: OCI Audit
- Oracle: OCI Cloud Guard
- Oracle: OCI IAM
- Oracle: OCI Web Application Firewall
Sources last checked .
Product names are trademarks of their owners and are listed to describe our experience; they do not imply endorsement or partnership.
How we use Cloud security & audit services for clients
Frequently asked questions
Direct answers to the questions we hear most. Something else on your mind?
Send us a messageWhat do the clouds record about an account?
Each cloud has its own audit and threat services: AWS CloudTrail and Amazon GuardDuty on Amazon Web Services (AWS); Cloud Audit Logs and Security Command Center on Google Cloud; the Azure Monitor activity log and Microsoft Defender for Cloud on Microsoft Azure; OCI Audit and Cloud Guard on Oracle Cloud Infrastructure (OCI).
Which services control who gets in?
AWS IAM Identity Center, Google Cloud IAM, Microsoft Entra ID and OCI IAM. We run least-privilege access reviews against them.
What does Microsoft Sentinel do here?
It is the Microsoft Azure service our team uses for security monitoring alongside Microsoft Defender for Cloud. Product names are experience, not partnerships.
What edge protection do you cover?
AWS WAF and AWS Shield Advanced, Google Cloud Armor, Azure DDoS Protection and the OCI Web Application Firewall.
Who reads the alerts?
We switch these services on early, send the logs to one place and agree who owns each alert. Log retention, export and alert routing are decided with you.
Which of our services use these cloud security tools?
Cybersecurity, Cloud Management and zero trust work. Book a free assessment or Call (305) 404-9404.