Verification Checklist

🔒

Security & Access

5 items

SSH Keys Rotated

Ensure all SSH keys are unique and rotated within 90 days

Critical

Firewall Rules Configured

Only allow ports 22, 80, 443 unless custom requirements exist

Critical

SSL/TLS Termination Active

Verify HTTPS redirect and certificate validity

Important

IAM Roles Defined

Least privilege principle applied to all users

Recommended

Audit Logging Enabled

CloudTrail equivalent logs streaming to S3

Recommended

🌐

Networking & DNS

4 items

DNS Propagation Verified

A/AAAA/CNAME records resolve globally

Critical

Load Balancer Health Checks

Passing health checks on all backend instances

Critical

CDN Caching Rules Set

Static assets cache TTL configured

Important

DDoS Protection Activated

CloudNexus Shield tier enabled

Recommended

💾

Data & Storage

4 items

Backup Retention Policy

Daily snapshots retained for minimum 14 days

Critical

Database Encryption at Rest

AES-256 enabled on all managed DB instances

Critical

Object Storage Versioning

Enabled to protect against accidental deletes

Important

Lifecycle Rules Configured

Automatic tiering to cold storage

Recommended

📊

Monitoring & Alerts

3 items

Uptime Monitoring Active

30s interval checks on public endpoints

Critical

Resource Alert Thresholds

CPU/RAM alerts at 80% sustained for 5m

Important

Log Aggregation Pipeline

Centralized logging via CloudNexus Logs

Recommended

6 Verification Checklist

Verification Complete!