Trend Micro Cloud Security

What is Trend Micro Cloud Security?

Trend Micro Cloud Security (formerly Cloud One) is a suite of security services for cloud environments. It includes workload protection, containers, storage, and compliance for AWS, Azure, and Google Cloud.

Key components:

• Workload Security - server and virtual machine protection
• Container Security - Docker/Kubernetes security
• File Storage Security - storage scanning
• Conformity - CSPM and compliance

Solution Architecture

graph TB
    subgraph "Cloud Providers"
        AWS[AWS]
        Azure[Azure]
        GCP[Google Cloud]
    end

    subgraph "Trend Micro Cloud Security"
        WS[Workload Security]
        CS[Container Security]
        FS[File Storage Security]
        CF[Conformity CSPM]
        NS[Network Security]
    end

    subgraph "Trend Vision One"
        XDR[XDR Correlation]
        Console[Unified Console]
    end

    AWS --> WS
    Azure --> CS
    GCP --> FS
    AWS --> CF

    WS --> XDR
    CS --> XDR
    FS --> XDR
    CF --> Console

Cloud Security Components

Workload Security

Server and virtual machine protection:

• Anti-malware - real-time malware detection
• IDS/IPS - network attack detection and blocking
• Integrity Monitoring - system file change monitoring
• Log Inspection - log analysis for threats
• Application Control - application execution control
• Virtual Patching - protection without patches

Container Security

Container and Kubernetes security:

• Image Scanning - image scanning before deployment
• Runtime Protection - running container protection
• Kubernetes Security - K8s cluster protection
• Registry Scanning - container registry scanning
• Compliance Checks - CIS benchmarks compliance

File Storage Security

Cloud storage protection:

• S3 Bucket Scanning - Amazon S3 scanning
• Azure Blob Scanning - Azure Storage protection
• GCS Scanning - Google Cloud Storage
• Malware Detection - malware detection in uploaded files
• Automated Quarantine - automatic quarantine

Conformity (CSPM)

Cloud Security Posture Management:

• Multi-cloud visibility - AWS, Azure, GCP visibility
• Compliance frameworks - PCI DSS, HIPAA, GDPR, SOC 2
• Misconfiguration detection - misconfiguration detection
• Real-time monitoring - continuous change monitoring
• Auto-remediation - automatic remediation

Supported Cloud Platforms

Cloud	Workload	Container	Storage	CSPM
AWS	✅ EC2, Lambda	✅ EKS, ECS	✅ S3	✅
Azure	✅ VM, Functions	✅ AKS	✅ Blob	✅
GCP	✅ Compute	✅ GKE	✅ GCS	✅

Use Cases

DevSecOps Pipeline

[Code Commit] --> [Container Build] --> [Image Scan] --> [Deploy] --> [Runtime Protection]
                                              |
                                    [Vulnerability Report]

Compliance Monitoring

• Continuous PCI DSS, HIPAA, GDPR compliance checking
• Automatic reports for auditors
• Compliance violation alerts

Incident Response

• XDR correlation with Vision One
• Automatic isolation of infected workloads
• Forensic data collection

Ecosystem Integration

• CI/CD - Jenkins, GitLab, GitHub Actions, Azure DevOps
• IaC - Terraform, CloudFormation, ARM Templates
• SIEM - Splunk, QRadar, Sentinel
• Ticketing - ServiceNow, Jira

Who is it for?

Trend Micro Cloud Security is for organizations that:

• Have workloads in cloud (IaaS, PaaS)
• Use containers and Kubernetes
• Need CSPM for compliance
• Want integrated cloud protection with endpoint and email

Deployment with nFlo

1. Cloud Assessment - cloud environment analysis
2. Architecture Design - security architecture design
3. Workload Protection - agent deployment on VMs
4. Container Integration - CI/CD pipeline integration
5. CSPM Activation - compliance monitoring enablement
6. XDR Integration - connection with Trend Vision One