ConceptsCloud Containment

Cloud Containment

The actions taken to stop an active cloud incident from spreading, using cloud-native controls, such as isolating a workload, revoking credentials and sessions, restricting a resource's network access, or quarantining an account.

Glossary definition

15 direct links1 lesson

Concept Neighborhood

Explore this concept’s connections in the groups below.

PrerequisiteRelated

Start here

Cloud Detection

The foundation Cloud Containment builds on, worth understanding first.

Open concept →

Prerequisitelearn this first

Cloud DetectionStart here

Identifying malicious or anomalous activity in a cloud environment by analyzing control-plane logs, identity events, network flows, and managed threat-detection services. It focuses on the signals unique to cloud, especially identity and API abuse.

lesson

Relatedsorted by lesson coverage

Cloud IAM Architecture

lessons

Cloud Compliance Landscape

lessons

Cloud Compliance Tools

lessons

Azure VM Forensics

lessons

Compromised IAM Credentials Playbook

lessons

Cryptomining Incident Response

lessons

Show 8 more connections

Cloud Forensics

lessons

BYOK and HYOK

lesson

CI/CD Security Integration

lesson

CIS Benchmarks Cloud

lesson

Cloud Data Security

lesson

Cloud IR

lesson

Cloud-Specific TTPs

lesson

Detection Automation

lesson

Related Lessons

1 lesson covers this concept

Cloud Detection and Response

Cloud Security Engineer