Evidence search
Search
Search titles, summaries, topics, providers, authors, and the full open-access corpus.
Results for “Resilience”
40 publicationsRoll out configuration changes as carefully as code
Flags, policy rows, generated files and customer settings triggered several global outages between 2024 and 2026. Seven primary incident reports show how each change slipped past its safeguards, and which controls their authors adopted afterward.
Resilience · Amazon Web Services / Microsoft Azure / Google Cloud / Cloudflare / CrowdStrike · By Cloud Security DeskPlan for incident reporting clocks that start at different moments
GDPR, NIS2, DORA, the SEC, the US banking agencies and CERT-In each start their reporting clock at a different decision. Plan around those triggers, the evidence each first notice needs and the rules still pending.
Detection & response · European Union / U.S. Securities and Exchange Commission / U.S. federal banking agencies / CISA / CERT-In / UK Parliament / Amazon Web Services / Microsoft Azure / Google Cloud · By Cloud Security DeskFind the AWS global control planes in your recovery path
Thirteen AWS control planes run in us-east-1 or us-west-2, and ordinary calls from other Regions still reach them. Audit runbooks, SDK settings and the last exercise, then swap each dependency for a data-plane operation.
Resilience · Amazon Web Services · By Cloud Security DeskPlan for an outage at your CDN or edge provider
When the CDN, WAF and edge provider fails, traffic can move to a regional WAF, a second CDN or the origin, and each keeps less protection. Decide early whether a second path is worth securing.
Resilience · Microsoft Azure / Cloudflare / Amazon Web Services / Google Cloud · By Cloud Security DeskFind the Entra changes that Backup and Recovery cannot roll back
Microsoft Entra Backup and Recovery rolls listed properties back to a daily backup kept for seven days. Credentials, role assignments, owners and user consent stay in place, and an unscoped recovery can undo your own containment.
Resilience · Microsoft Entra / Microsoft Graph · By Cloud Security DeskPlan Azure disaster recovery for a region without a pair
Thirteen Azure regions have no pair and eight more pair with a restricted-access region. This guide shows which built-in geo-redundancy disappears, what replaces it service by service, and how to choose the recovery region.
Resilience · Microsoft Azure · By Cloud Security DeskRestore EBS volumes at the speed your recovery plan assumes
A restored EBS volume is slow until every block arrives from S3. Price the provisioned initialization rate, fast snapshot restore credits and Regional limits as recovery-time arithmetic before an RTO depends on them.
Resilience · Amazon Web Services · By Cloud Security DeskContain failures with cell-based architecture and shuffle sharding
Cells limit a failure to the tenants behind one partition only when routing, data and change delivery are partitioned too. Here is how to choose the key, size cells and check the shuffle-sharding arithmetic.
Resilience · AWS / Microsoft Azure / Slack · By Cloud Security DeskDesign health checks that remove broken instances without causing outages
A health check is an automated decision to remove capacity. Keep load balancer checks local, learn what your platform does when every target fails, and set probe timing from documented defaults.
Resilience · Amazon Web Services / Microsoft Azure / Google Cloud / Kubernetes · By Cloud Security DeskPlan for the backlog that follows a regional cloud outage
AWS fixed the DNS fault behind its October 2025 us-east-1 outage within three hours, yet recovery ran into the afternoon. Design retries, queues and capacity automation for that second phase.
Resilience · Amazon Web Services · By Cloud Security DeskChoose a multi-region database consistency model before you need failover
The replication model decides which writes survive a Region failure. Compare asynchronous and quorum options in DynamoDB, Aurora, Spanner and Cosmos DB by recovery point, write latency and the reconciliation each one leaves you.
Resilience · Amazon Web Services / Google Cloud / Microsoft Azure · By Cloud Security DeskBack up a Kubernetes cluster so workloads can actually be restored
A Kubernetes backup has to carry definitions, Secrets and volume data, and the restore depends on identity, keys and images it never held. Plan the layers, the restore order and the checks that prove recovery.
Resilience · Kubernetes / Velero / Amazon Web Services / Google Cloud / Microsoft Azure · By Cloud Security DeskPrepare a cloud exit strategy that satisfies DORA
DORA requires a tested exit plan for every cloud service that supports a critical or important function. This guide turns that duty into dependency maps, measured data exports, staged tests and register entries that agree.
Resilience · European Commission / European Supervisory Authorities / European Central Bank / Amazon Web Services / Google Cloud / Microsoft Azure · By Cloud Security DeskRecover a deleted file with S3 Versioning
Recover an S3 object by inspecting retained versions, downloading a known copy, or removing the right delete marker without deleting the recovery data.
Resilience · AWS · By Cloud Security DeskChoose an RDS recovery window you can actually restore
Choose RDS backup retention, inspect the real restorable interval, validate an isolated database restore, and record cleanup and recovery limits.
Resilience · AWS · By Cloud Security DeskRecover deleted Google Cloud Storage objects with soft delete
Choose a Cloud Storage soft delete window, restore a specific object generation, validate its contents, and account for retention and cleanup.
Resilience · Google Cloud · By Cloud Security DeskSet up Cloud SQL backups and prove you can restore
Configure Cloud SQL PostgreSQL backups, understand retention settings, and rehearse a restore through database validation and application cutover.
Resilience · Google Cloud · By Cloud Security DeskRecover a deleted Azure blob with soft delete
Choose the right recovery action for a blob, version or container and verify restored bytes.
Resilience · Azure · By Cloud Security DeskRecover a deleted Azure Key Vault secret
Distinguish secret recovery from vault recovery and verify versioned application references.
Resilience · Azure · By Cloud Security DeskMake PostgreSQL point in time recovery reproducible
Build a version-aware recovery chain from protected base backups and WAL through timeline selection, isolated replay and application acceptance.
Resilience · PostgreSQL · By Cloud Security DeskPlan Kubernetes drains around the disruption budget
Review selector scope, current status, unhealthy Pod handling and replacement capacity before treating a blocked drain as a reason to bypass availability controls.
Resilience · Kubernetes · By Cloud Security DeskDiagnose NAT gateway port exhaustion before adding capacity
Match allocation errors to destination tuples and gateway mode before changing connection pools, addresses or routes.
Resilience · AWS · By Cloud Security DeskSeparate stopping a fault experiment from recovering the service
Plan AWS FIS around separate evidence for stopping execution, removing fault effects and accepting the recovered application.
Resilience · AWS · By Cloud Security DeskFind the EBS limit behind a slow database
Separate volume operation rate, byte rate, instance bandwidth and snapshot initialization before changing storage for a slow database.
Resilience · AWS · By Cloud Security Desk