A company has recently migrated their application to a cloud environment and has concerns about data privacy and security. They have asked the FinOps team to recommend a strategy for securing their cloud environment.

Implementing multifactor authentication (MFA) and encryption are foundational best practices for securing a cloud environment. MFA adds a critical layer of security to user identities, protecting against compromised credentials. Encrypting data at rest (on storage) and in transit (across networks) ensures that data remains confidential and protected from unauthorized access or interception. These controls are essential for maintaining data privacy and meeting security compliance requirements. While FinOps focuses on financial management, it operates within the broader context of cloud governance, where security is a paramount concern to prevent costly breaches.

A. This is a restatement of the question, not a valid answer choice.
B. Using a single, all-powerful admin account violates the principle of least privilege and creates a significant security risk and single point of failure.
D. Sharing credentials is a severe security anti-pattern. Access should be managed through individual, role-based accounts to ensure accountability and control.
E. Storing data unencrypted is a major security vulnerability that exposes sensitive information and often violates regulatory compliance standards like GDPR or HIPAA.
F. Allowing unrestricted network access dramatically increases the attack surface. Access should be limited to trusted networks and IP ranges using firewalls and security groups.

1. AWS Well-Architected Framework, Security Pillar: This official vendor documentation outlines core security principles. It explicitly recommends enforcing MFA and encrypting data at rest and in transit as fundamental practices.

Reference: AWS Whitepaper, "AWS Well-Architected Framework," Security Pillar, Design Principles section, specifically "Implement a strong identity foundation" (advocates for MFA) and "Protect data in transit and at rest." (2023).

2. Cloud FinOps, 2nd Edition: While focused on finance, this book emphasizes that FinOps operates within a governance framework that includes security. Poor security leads to significant financial risk and cost.

Reference: Storment, J.R., & Fuller, M. (2023). Cloud FinOps: Collaborative, Real-Time Cloud Financial Management. O'Reilly Media. Chapter 10, "Organizational Alignment," discusses the collaboration between FinOps, Security, and Operations teams to enforce governance policies.

3. Microsoft Azure Well-Architected Framework - Security: Similar to AWS, Microsoft's official framework identifies identity management and data protection as critical security pillars.

Reference: Microsoft Azure Documentation, "Microsoft Azure Well-Architected Framework - Security," Design principles section, specifically "Use a modern identity and access management (IAM) solution" and "Protect data." (2023).