I’m often asked about cloud security best practices, and my answer is always the same: It depends on what you want to protect in the cloud.
Of course, encryption and multifactor authentication are in the mix to keep your data and applications safe. Indeed, the security services you’ll find in the cloud are about as good as they get in IT. After all, we’ve yet to see a major attack in a public cloud. At least, nobody has fessed up if they experienced one.
But putting all security bets aside, the best way to protect your application in the public cloud is to actively watch it.