Separating cloud networks

Review the short definitions of cloud security boundaries, authentication factors, permissions, and recovery controls involved.

Network segmentation

Separating network tiers by role so that communication paths can be limited.

Security group

A virtual firewall that controls traffic to a cloud resource by source, destination, and port.

Reachability

Whether a source or network can communicate with a target resource.

Lateral movement

Expanding from one compromised resource to other resources in the environment.