Top Challenges of Managing Public Cloud Security for MSPs

While the cloud offers many benefits that make doing business easier, this new domain has opened up space for cybercriminals to run wild where few IT professionals fully understand exactly how to manage a public cloud environment. As an MSP, you have an obligation to your customers to understand the threat landscape in the cloud and better prepare them for potential attacks that target their business through the cloud.

According to Gartner, 95% of cloud security failures are the fault of organizations. Simple oversights like overprivileged IAM roles, exposed Remote Desktop Protocols and data storage misconfigurations are some of the most common mistakes organizations make in the cloud, which can leave customers vulnerable to ransomware attacks, expose data to the public internet, and compromise workloads.

Not only are cybercriminals finding new ways to take advantage of these misconfigurations to gain a foothold in an organization’s network via the cloud, but they’re also extending techniques that they already know work to this new attack vector. As customers migrate to the cloud, so do the cybercriminals, which means that threats such as ransomware are just as topical in the cloud as on premises. As a result of this hefty toolbox of attack methods, recent research from Sophos shows, 70% of organizations having suffered a cloud security incident in last 12 months.

Threat detection in the cloud is difficult, and while MSPs are well positioned to make this easier, they also have their own challenges to overcome when managing customers’ public cloud environments:

Complexity of Multi-Cloud Environments

Seventy-three percent of organizations are using two or more public cloud providers. Organizations typically choose to adopt multiple cloud platforms to take advantage of the technology best suited for their applications, while also retaining leverage over cloud service providers. But the challenge soon becomes that MSPs need visibility across all public cloud environments to properly monitor configurations, services and traffic to protect their customers from every angle.

Short-Lived Resources

Five to 10 years ago, resources deployed on a virtual or bare metal machine would exist for months or even years, making it simple to go back and look at logs or remote desktop in. Now, resources are much shorter lived, with serverless functions that exist for micro-seconds and containers that exist for minutes. Without this record, it makes it more difficult for MSPs to identify the root cause of a security incident or pinpoint where an abnormality began and stop a threat in its tracks before it can cause damage.

More Services Means More Data

With hundreds, if not thousands of cloud resources and services, MSPs also struggle to aggregate all of the data from disparate sources and identify the high-priority events that could turn into a security incident or run up large usage invoices from the cloud provider. Unfortunately, the volume of data created and shared through the cloud today makes it completely inefficient and nearly impossible for humans to manually sort through the noise and make decisions based on meaningful analysis.

To overcome these public cloud security challenges, MSPs need a