Authenticate application components that communicate through a network before exchanging any kind of information.

• This includes mobile applications that communicate with a cloud-based web service, or embedded devices that communicates with a controller.
• Implicit and inherent trust of other components leads to external cyberattack avenues.

  - For example, if your web server uses a database located on a separate machine and communicates with it through the network, it should authenticate the database before using it.
  - As another example, your mobile application should authenticate your cloud service before uploading user information.
  

Imported from SD Elements: https://redhat.sdelements.com/bunits/psse-secure-development/red-hat-connectivity-link/red-hat-connectivity-link-v10/tasks/phase/requirements/184-T558/

Training Modules

Cloud Security Fundamentals

• Cloud Authentication.Authorization.and Auditing