Automated Cloud Security Auditing

Two Sigma is enhancing its cloud security posture by automating security audits and compliance checks. This involves leveraging open-source tools like Forseti for Google Cloud Platform (GCP) to inventory cloud resources, define custom security rules, and detect violations. The system integrates with Google Cloud Security Command Center (Cloud SCC) to record security findings immutably and trigger notifications for remediation. This approach replaces manual, labor-intensive workflows with an agile and automated system. This post details the integration of Forseti with Cloud SCC via the Cloud SCC API to directly write violations, ensuring immutability and greater control over findings. A notification mechanism was also built to alert internal teams and suggest remediation steps.