Sonrai Dig For AWS Cloud Security

Provide Deep Visibility (CSPM), Eliminate Identity Risks and Strengthen Data Protection for your AWS Workloads – Operationalize your Cloud Security Model

Sonrai Dig is built on a sophisticated graph that continuously identifies and monitors every possible relationship between identities and data that exists inside your AWS Cloud.

Dig works in concert with your underlying 150+ AWS services and automates the incorporation of security controls to enable audit, visibility, protection, and detection of risks. It additionally monitors and remediates cloud misconfigurations and policy violations allowing customers to achieve continuous security and compliance. Customers (Infra, Ops, and SecOps team) require an integrated security approach along with cloud-native tools, with automated 24/7 cloud monitoring to govern your identities and protect your data.

Sonrai Dig uses AWS APIs to baseline the configuration of your cloud, and build an up-to-date identity and data security model of how your identities can interact with resources and access data. Dig utilizes advanced analytics to determine the true end-to-end permissions (or “Effective Permissions”) of every identity in your cloud.

These Effective Permissions analytics take into consideration not just people (users) identities but also non-people (such as AWS roles, compute, and serverless functions) identities. By knowing your Effective Permissions, not only can you gain total visibility into what your identities can do and what data they can access, but also visualize how they gain these permissions. This makes the job of enforcing Least Privilege a much simpler and manageable task.

Sonrai for AWS Security Hub

Bring Sonrai’s unique insights into Security Hub. Monitor assets and send alerts on resource configurations, compliance violations, network security risks, and anomalous user activities across AWS environments in one unified control center.