The process is designed to have the least privilege necessary, and it is not possible to create, destroy or modify services or resources in your infrastructure. All information is kept confidential by not leaving our infrastructure.

Apollo's connection to the customer's cloud takes only about 20 seconds to connect and the security audit runs in about 12 hours. Fast, agile and easy.

It is not intrusive since it is a configuration scanner and only maps the current state of the infrastructure, therefore it cannot modify or affect the operability, it runs in a couple of minutes and it is not continuous. The advantage is that this type of scan does not require a window to do it, it can be run at any time without affecting the current traffic on the cloud servers/services.

A series of steps are shared with the user to configure an unprivileged access (Read permission - No admin), once the user configures the access the Apollo tool runs the analysis and in a matter of minutes shows the results of the security audit in the main Dashboard of the client and also allows the user to download in CSV if desired.

No, the process is designed to be non-intrusive and interact with the cloud directly via API, which means you will not have any interruption or disruption to your services or applications and there will be no impact on any of your operations, so it is possible to run it whenever you decide.

A cloud configuration audit is a systematic review of an organization's data security configurations and cloud service architecture to identify and remediate potential vulnerabilities or cyber-attacks.

This security audit is crucial to protect the company's databases, services and applications, prevent security breaches or data leaks and comply with international standards and industry regulations on cybersecurity.

Aspects such as authentication, access control, key management, data protection, security policies, network configuration, backups and regulatory compliance are evaluated.

Measures may include updating security policies, strengthening authentication and access control, improving key management, encrypting data, and adjusting data storage network settings.

The frequency may vary depending on the nature and size of the organization, but it is generally recommended to perform these audits at least once a year and/or after significant changes to the cloud infrastructure.

The assessment tools do not store your information and results are generated locally and confidentially from Apollo.

Apollo's cloud security audit module is designed to identify a wide range of threats, including:

• Access control weaknesses: Audits password policies, general user status, authentication policies, MFA status check, etc.
• Resources with risky configurations: Detects resources (databases, servers, etc.), sensitive network ports, etc. exposed to the Internet, encryption status of Cloud services, 
• Network infrastructure: Security assessment of VPCs, Security Groups, subnets, etc. Including exposure of policies on resources such as API Gateway, Load Balancers, etc.‍
• Compliance: Checks against compliance standards such as CIS, GDPR, HIPAA, PCI DSS. Assessment of configuration management practices.

To improve the security of your data in the cloud we recommend:

• Strong passwords: Use strong passwords and change them regularly. Consider two-factor authentication for an additional layer of security.
• Regular updates: Keep your systems and applications up to date to protect against known vulnerabilities.
• Data encryption: Use encryption to protect information during transmission and at rest.
• Staff training: Educate your team on online security best practices to avoid threats such as phishing.

Apollo also provides specific recommendations based on the unique characteristics of your cloud environment.

When evaluating cloud security auditing solutions, it is essential to consider:

• Real-time monitoring: A solution that provides continuous monitoring to detect and respond quickly to threats.
• Seamless integration: The ability to easily integrate with your existing infrastructure and other security tools. Like Apollo that takes only seconds to install. 
• Detailed reports: Clear and detailed reports that allow you to understand the security status of your cloud.
• Scalability: A solution that can grow with your needs, adapting to changes in your infrastructure.

Apollo meets these criteria, providing a comprehensive and adaptable solution to your security requirements.

‍

Regulatory compliance in cloud security involves adhering to international regulations and standards. This may include:

• Data protection: Ensure that data stored in the cloud is protected and managed in accordance with privacy laws.
• Industry regulations: Comply with the specific regulations of your industry to ensure the security and privacy of information.‍
• Regular audits: Conduct periodic audits to verify and demonstrate compliance with established standards.