VMware Aria Automation for Secure Clouds Free Tier

As you onboard your cloud accounts, VMware Aria Automation for Secure Clouds maps cloud objects, data and relationships, which are updated continuously to model your changing cloud environment. The service applies best practices based on predefined security and compliance benchmarks to this data lake and reports any security violations. This unique data model helps you visualize and examine any security violation detected in your cloud stack across both cloud and Kubernetes resources, and understand heightened risk due to adjacent objects’ risk posture.

It only takes a few minutes to fill a form, add a cloud account, and start using VMware Aria Automation for Secure Clouds Free Tier. Within no time, the service maps your cloud resources, relationships and metadata, giving you an easy way to search inventory and understand your cloud architecture. VMware Aria Automation for Secure Clouds Free Tier includes predefined security and compliance best practices, such as Center for Internet Security (CIS) benchmarks, to provide deep insight into misconfiguration risks.

Figure 1: An example of a Kubernetes service account associated with an IAM role andpermissions assigned to each of the workloads.

Key benefits

Using one platform, you can get an overview of cloud inventory and secure cloud native infrastructure with a unique ability to detect advanced misconfigurations due to relationships between cloud and Kubernetes resources. For example,Figure 1 shows that in an Amazon Elastic Kubernetes Service (EKS) cluster,a cloud identity and access management (IAM) role (cloud resources) can be attached with a Kubernetes service account (Kubernetes resources). And if you accidentally assign a high privilege cloud role with admin-level access, you could end up exposing your cloud account.

Investigate issues

• Easily find cloud resources with simple, type-ahead search.
• Understand relationships between cloud resources with visual graphs.
• Inspect resource metadata and track configuration changes over time.

Reduce misconfigurations

• Benchmark security and compliance posture based on the latest CIS frameworks.
• Prioritize the most critical misconfigurations and suppress false positives.
• Understand the security context of a misconfiguration, including the resourceblast radius.

Learn and collaborate

• Get instant service access to start securing your cloud environment within minutes.
• Learn security best practices with easy access to a rules wiki, documentation,and community support.
• Invite team members to collaborate on your journey to minimize security risk.