System and method for retrieval and analysis of operational data from customer, cloud-hosted virtual resources

A system for protecting public cloud-hosted virtual resources, comprising:

• a processor, and
• a memory communicatively coupled to the processor and configured to store cloud visibility logic, the cloud visibility logic comprises
• credential evaluation logic that, when executed by the processor, is configured to gain authorized access to a cloud account within a first public cloud network,
• data collection logic that, when executed by the processor, is configured to retrieve account data from the cloud account,
• correlation logic that, when executed by the processor, is configured to conduct analytics on the account data to determine whether the cloud account is subject to a cybersecurity threat or misconfiguration,
• aggregation logic configured to receive and aggregate account data, including operational log data, associated with a second cloud account maintained within a second public cloud network different than the public cloud network, the correlation logic to perform analytics on the account data from the cloud account and the account data from the second cloud account maintained within the second public cloud network, and
• reporting logic that, when executed by the processor, is configured to generate an alert when the cloud account or the second cloud account is determined to be subject to the cybersecurity threat or misconfiguration.

A computerized method for protecting public cloud-hosted virtual resources, comprising:

• gaining authorized access to a cloud account within a first public cloud network;
• retrieving account data from the cloud account;
• conducting analytics on the account data to determine whether the cloud account is subject to a cybersecurity threat or misconfiguration;
• aggregating analytic results associated with the account data from the cloud account by the correlation logic and analytic results based on analytics conducted on account data associated with a second cloud account maintained within a second public cloud network different than the first public cloud network;
• and
• generating an alert when the cloud account is determined to be subject to the cybersecurity threat or misconfiguration.