All administrative systems are specifically designed, built, configured, and hardened to protect the management plane of the cloud:
- All access is logged and audited.
- When an employee no longer has a business need to access the management plane, the privileges and access to these hosts and relevant systems are revoked.
INSTANCE ISOLATION
Different instances running on the same physical machine are isolated from each other via the hypervisor.
In addition, the firewall resides within the hypervisor layer, between the physical network interface and the instance's virtual interface. All packets must pass through this layer, thus an instance's neighbours have no more access to that instance than any other host on the Internet and can be treated as if they are on separate physical hosts.