Cloud vendors initially promised to handle security, then shifted responsibility back to customers through contracts. The speaker recommends system hardening and network segmentation to address the resulting technical debt, plus creative mitigation strategies for remaining gaps.
So the whole idea in the beginning was we need to be more secure. So what do we do? Well, we spend money and push it into the cloud to some vendors. Now it's their problem. And of course that worked for like a year. And then vendors realized that they don't want to be accountable for it either. So they make you sign contracts and be responsible for configuration and all sorts of things. And then that went away. Going back to tech debt, what do you do about this? You do the basics. You do your hardening, you do your segmentation, but you try to be creative about it.
