Attack Surface: Cloud Infrastructure Sync

The Cloud Infrastructure Sync page [ Attack Surface ➔ Cloud Infrastructure Sync] in the Security Performance Management application allows us to automatically update your cloud IP footprint daily. This reduces the time it takes to refresh cloud IPs, improves the accuracy of our data, and prevents misattributions. It allows users to include their cloud security posture as part of their Bitsight rating. Inclusion is optional and controlled by the users.

Better visibility into public cloud infrastructure is a common and sought-after request. With a one-time setup, your cloud IP addresses will automatically update in your Bitsight companies.

• Comparable: Compare cloud and non-cloud hosted security performance.
• Objective: Independently calculated rating.
• Shareable: Enable efficient conversations between your security team and third parties who are monitoring your security posture.

We scan for assets several times per day and will reflect changes that persist for an entire period of 48 hours. It takes 15 minutes to set up - you’ll need to have your Cloud provider’s admin role.

After the initial self service setup, in 3 to 5 days you’ll be able to see the rating constructed for these assets in your Bitsight rating’s tree.

Actions

Add a Connection

An admin for your account must accept the Cloud Infrastructure Sync legal terms before you can add any connections. These terms pop up the first time an admin accesses the page.

Instructions: Select Add Connection to add a connection to a supported Cloud Service Provider Currently, we support Amazon Web Services (AWS), Azure, and Google Cloud Platform (GCP).

Delete an In-progress Connection

Instructions: Mouseover an in-progress connection and select Delete. If you’re unable to do so, please reach out to our Support team to delete the connection for you.

Enable Cloud Infrastructure Sync for a specific CSP

Instructions: See AWS, Azure, and GCP guides.

Edit and Resume Setup

Instructions: Select the connection name of an in-progress connection to edit it or resume setup. Some fields can’t be changed after final submission.

See Self-Published Report Details

Instructions: Select the company name at the bottom of a successful connection to see details about that self-published company, including where it is located in the Bitsight Ratings tree.

Frequently Asked Questions

• Does Bitsight charge for this feature?
• What kind of package do I need to have?
• Are there plans to offer this feature with other cloud services?
• Can I opt out at any time?

Does Bitsight charge for this feature?

This feature is free. To use it, all you need is a MySubsidiary license to monitor the self-published company you create to monitor your cloud IPs from a specific CSP.

What kind of package do I need to have?

You must have an available MySubsidiary license to monitor the self-published company where the Cloud Infrastructure Sync assets are allocated.

Are there plans to offer this feature with other cloud services?

Yes, we’re currently exploring adding more CSPs.

Can I opt out at any time?

You can delete Cloud Infrastructure Sync connections or remove access roles and permissions from your cloud environment at any time.