This blog is about understanding, auditing, and addressing risk in cloud environments. Systems and architectures are rapidly converging, hiding complexity with additional layers of abstraction. Simplicity is great for operations - as long as risks are understood and appropriately addressed.
I'm reposting for others to review because this keeps coming up. This is helpful if you don't have an audit background so that you can appreciate what goes into the audit process.
