CLD-002 Cloud Services
What is the difference between cloud storage, cloud computing and a cloud account?¶
Cloud storage holds data, cloud computing runs systems or processes, and a cloud account provides identity and access. Evidence of one does not automatically prove the others.
Evidence and questions to consider¶
- files, versions, deletion and sharing;
- virtual systems, applications and configuration;
- account permissions and authentication;
- sessions and linked devices;
- service accounts and automation;
- the precise event under investigation.
Keep the sources separate¶
A provider record, customer-administrator report, application screen and device artefact may describe related activity without proving the same thing. Preserve exact identifiers, dates, times and time zones, and test shared access, delegation, automation, compromise and changing account control.
Key takeaway
Separate the account, stored data and computing activity before deciding who did what.