Methods and apparatus to identify and report cloud-based security vulnerabilities

A non-transitory computer readable medium comprising instructions that, when executed, cause processor circuitry to at least:

• check for a first security vulnerability associated with an application programming interface (API) of a cloud compute network, the first security vulnerability corresponding to at least one call to the API that deviates from a baseline report, the baseline report based on at least one communication in the cloud compute network;
• and
• check for a second security vulnerability associated with identity and access management in the cloud compute network, the check for the second security vulnerability based on an entity in the cloud compute network permitted to access a service provided by the cloud compute network, the second security vulnerability corresponding to an unauthorized request to access at least one of a device of the cloud compute network or the service provided by the cloud compute network.

An apparatus comprising:

• means for auditing cloud application programming interface (API) logs for a first security vulnerability associated with an API of a cloud compute network, the first security vulnerability corresponding to at least one call to the API that deviates from a baseline report, the baseline report based on at least one communication in the cloud compute network;
• and
• means for auditing an identification for a second security vulnerability associated with identity and access management in the cloud compute network, the auditing of the identification based on an entity in the cloud compute network permitted to access a service provided by the cloud compute network, the second security vulnerability corresponding to an unauthorized request to access at least one of a device of the cloud compute network or the service provided by the cloud compute network.

A method comprising:

• monitoring for a first security vulnerability associated with an application programming interface (API) of a cloud compute network, the first security vulnerability corresponding to at least one call to the API that deviates from a baseline report, the baseline report based on at least one communication in the cloud compute network;
• and
• monitoring for a second security vulnerability associated with identity and access management in the cloud compute network, the monitoring for the second security vulnerability based on an entity in the cloud compute network permitted to access a service provided by the cloud compute network, the second security vulnerability corresponding to an unauthorized request to access at least one of a device of the cloud compute network or the service provided by the cloud compute network.