Most attacks are done via local file access. Ship things over an API. EC2 -> S3 ...

		jabart on July 19, 2019 \| parent \| context \| favorite \| on: QuickBooks Cloud Hosting Firm iNSYNQ Hit in Ransom... Most attacks are done via local file access. Ship things over an API. EC2 -> S3 bucket with only write access and versioning enabled. EC2 -> EFS and it's a rotating set of 7 with 7 different security groups that rotate.