Attack Surface: Cloud Infrastructure Sync

The Cloud Infrastructure Sync page [ Attack Surface ➔ Cloud Infrastructure Sync] in the Security Performance Management application allows us to automatically update your cloud IP footprint daily. This reduces the time it takes to rescan cloud IPs, improves the accuracy of our data, and prevents misattributions. It allows a company to include its cloud security posture as part of its Bitsight rating. Inclusion is optional and controlled by the company.

Better visibility into public cloud infrastructure is a common and sought-after request. With a one-time setup, your cloud IP addresses will automatically update in your Bitsight companies.

• Comparable: Compare cloud and non-cloud hosted security performance.
• Objective: Independently calculated rating.
• Shareable: Enable efficient conversations between your security team and third parties who are monitoring your security posture.

We scan for assets several times per day and will reflect changes that persist for an entire period of 48 hours. It takes 15 minutes to set up - you’ll need to have your Cloud provider’s admin role.

After the initial connection is setup, in 3 to 5 days you’ll be able to see the rating constructed for these assets in your Bitsight ratings tree. Assets added to infrastructure when a connection is setup have a 60-day grace period before they impact grading.

The self-published companies created with Cloud Infrastructure Sync focus only on IP addresses, so domain-specific risk vectors like SPF, DKIM, and Web Application Headers won’t have Findings unless domains are included in the infrastructure. When there are no active findings for these risk vectors they are assigned a default grade. Learn more about default grades.

Actions

Add a Connection

An admin for your account must accept the Cloud Infrastructure Sync legal terms before you can add any connections. These terms pop up the first time an admin accesses the page.

Instructions: Select the Add Connection dropdown at the top-right of the Cloud Infrastructure page. See the guide for...

• AWS
• Azure
and
• GCP

Delete an In-progress Connection

Instructions: Mouseover an in-progress connection and select Delete. If you’re unable to do so, please reach out to our Support team to delete the connection for you.

Edit and Resume Setup

Instructions: Select the connection name of an in-progress connection to edit it or resume setup. Some fields can’t be changed after final submission.

See Self-Published Company Details

Instructions: Select the company name at the bottom of a successful connection to see details about that self-published company, including where it is located in the Bitsight Ratings tree.

Frequently Asked Questions

• Does Bitsight charge for this feature?
• What kind of package do I need to have?
• Are there plans to offer this feature with other cloud services?
• Can I opt out at any time?

Does Bitsight charge for this feature?

This feature is free. To use it, all you need is a MySubsidiary license to monitor the self-published company you create to monitor your cloud IPs from a specific CSP.

What kind of package do I need to have?

You must have an available MySubsidiary license to monitor the self-published company where the Cloud Infrastructure Sync assets are allocated.

Are there plans to offer this feature with other cloud services?

Yes, we’re currently exploring adding more CSPs.

Can I opt out at any time?

You can delete Cloud Infrastructure Sync connections or remove access roles and permissions from your cloud environment at any time.