Cloud security strikes fear into the heart of CISOs and risk practitioners alike. For years there were alarmist warnings “the cloud is just someone else’s computer”, “once it’s in the cloud it’s no longer yours”, “you don’t know where your data is” etc. While some of these do hold some truth, the reality is that cloud computing offers additional observability capabilities. The power of the API is such that every action must be authenticated, authorised and audited, meaning that organisations have enhanced granular control over the programmatic access to, and usage of their data in a single audit trail.
