{"id":1003,"date":"2026-06-28T09:14:19","date_gmt":"2026-06-28T01:14:19","guid":{"rendered":"https:\/\/junai.ai\/blog\/cloud-security-mistakes-checklist-2026\/"},"modified":"2026-06-28T09:14:19","modified_gmt":"2026-06-28T01:14:19","slug":"cloud-security-mistakes-checklist-2026","status":"publish","type":"post","link":"https:\/\/junai.ai\/blog\/cloud-security-mistakes-checklist-2026\/","title":{"rendered":"\ud074\ub77c\uc6b0\ub4dc \ubcf4\uc548 \uc124\uc815 \uc2e4\uc218 8\uac00\uc9c0 \uccb4\ud06c\ub9ac\uc2a4\ud2b8 (2026)"},"content":{"rendered":"\n<!-- WordPress REST API \ubc1c\ud589\uc6a9 HTML (\uc790\ub3d9 \uc0dd\uc131) -->\n<!-- WP-FEATURED-MEDIA-ID: 998 -->\n<div style=\"max-width:800px;margin:0 auto;\">\n<style>\n:root{\n  --color-primary:#4f46e5;\n  --color-accent:#6366f1;\n  --color-bg:#fafbfc;\n  --color-bg-card:#ffffff;\n  --color-text:#1a202c;\n  --color-text-muted:#64748b;\n  --hero-start:#1e1b4b;\n  --hero-end:#4338ca;\n  --code-bg:#0f172a;\n  --code-fg:#e2e8f0;\n  --font-body:-apple-system,BlinkMacSystemFont,'Apple SD Gothic Neo','Malgun Gothic',sans-serif;\n  --font-mono:'SF Mono',Menlo,Consolas,monospace;\n}\n*{box-sizing:border-box;}\n.wrap{max-width:760px;margin:0 auto;padding:0 20px 80px;}\n.hero{background:linear-gradient(135deg,var(--hero-start) 0%,var(--hero-end) 100%);color:#fff;padding:54px 24px 60px;text-align:center;}\n.hero .eyebrow{display:inline-block;font-size:13px;letter-spacing:.08em;font-weight:700;color:#c7d2fe;background:rgba(255,255,255,.10);padding:6px 14px;border-radius:999px;margin-bottom:18px;}\n.hero h1{font-size:34px;line-height:1.32;margin:0 auto;max-width:680px;letter-spacing:-0.025em;font-weight:800;}\n.hero p{color:#c7d2fe;font-size:17px;margin:16px auto 0;max-width:560px;}\n.hero-img{display:block;width:100%;max-width:760px;height:auto;margin:30px auto 0;border-radius:14px;}\narticle{margin-top:40px;}\nh2{font-size:27px;line-height:1.4;letter-spacing:-0.02em;margin:52px 0 16px;padding-bottom:10px;border-bottom:2px solid #eef1f6;font-weight:800;}\nh3{font-size:20px;margin:30px 0 10px;font-weight:700;color:#312e81;}\np{margin:14px 0;}\na{color:var(--color-primary);text-decoration:none;border-bottom:1px solid #c7d2fe;}\na:hover{border-bottom-color:var(--color-primary);}\nstrong{font-weight:700;color:#1e1b4b;}\ncode{font-family:var(--font-mono);background:#eef1f8;color:#3730a3;padding:2px 6px;border-radius:5px;font-size:14.5px;}\n.lead{font-size:18.5px;color:#334155;}\n.data-box{background:#eef2ff;border-left:4px solid var(--color-primary);border-radius:0 10px 10px 0;padding:18px 22px;margin:24px 0;}\n.data-box .big{font-size:30px;font-weight:800;color:var(--color-primary);line-height:1.2;display:block;}\n.data-box .src{font-size:13px;color:var(--color-text-muted);margin-top:6px;display:block;}\n.warning-box{background:linear-gradient(135deg,#fff7ed,#fef2f2);border:1px solid #fecaca;border-radius:12px;padding:18px 22px;margin:26px 0;font-size:16px;}\n.warning-box b{color:#b91c1c;}\n.tablewrap{overflow-x:auto;-webkit-overflow-scrolling:touch;margin:26px 0;}\ntable{width:100%;border-collapse:collapse;font-size:15px;background:var(--color-bg-card);}\nth,td{padding:11px 12px;text-align:left;border-bottom:1px solid #e2e8f0;vertical-align:top;}\nth{background:#f1f5f9;font-weight:700;color:#0f172a;}\ntd:first-child,th:first-child{font-weight:700;}\n.fix-step{display:flex;gap:16px;align-items:flex-start;margin:22px 0;}\n.fix-num{flex:0 0 auto;display:inline-flex;align-items:center;justify-content:center;width:42px;height:42px;border-radius:50%;background:var(--color-primary);color:#fff;font-weight:800;font-size:18px;}\n.fix-step .body{flex:1;}\n.fix-step .body p{margin:4px 0;}\npre{background:var(--code-bg);color:var(--code-fg);padding:14px 16px;border-radius:10px;overflow-x:auto;font-family:var(--font-mono);font-size:13.5px;line-height:1.6;margin:14px 0;}\n.cta{background:#1e1b4b;color:#fff;border-radius:16px;padding:32px 28px;margin:56px 0 0;text-align:center;}\n.cta .cta-title{color:#fff;margin:0 0 10px;font-size:23px;font-weight:800;line-height:1.4;}\n.cta p{color:#c7d2fe;margin:0 0 20px;}\n.cta a{display:inline-block;background:#6366f1;color:#fff;font-weight:700;padding:13px 28px;border-radius:10px;border:none;min-width:44px;min-height:44px;}\n.meta-foot{font-size:13.5px;color:var(--color-text-muted);margin-top:30px;border-top:1px solid #eef1f6;padding-top:16px;}\n@media (max-width:560px){\n  .tablewrap table,.tablewrap thead,.tablewrap tbody,.tablewrap tr,.tablewrap th,.tablewrap td{display:block;width:auto;}\n  .tablewrap thead{display:none;}\n  .tablewrap tr{margin:0 0 14px;border:1px solid #e2e8f0;border-radius:10px;overflow:hidden;}\n  .tablewrap td{border:none;border-bottom:1px solid #f1f5f9;padding:9px 14px;}\n  .tablewrap td:first-child{background:#f1f5f9;font-weight:800;font-size:15.5px;}\n  .tablewrap td:last-child{border-bottom:none;}\n  .tablewrap td[data-label]::before{content:attr(data-label) \" \u2014 \";font-weight:700;color:var(--color-primary);}\n}\n@media (max-width:480px){\n  .hero{padding:40px 18px 44px;}\n  .hero h1{font-size:26px;}\n  h2{font-size:23px;}\n  h3{font-size:18px;}\n}\n<\/style>\n<div class=\"hero\">\n  <span class=\"eyebrow\">JUNAI Tech \u00b7 \ud074\ub77c\uc6b0\ub4dc \ubcf4\uc548<\/span>\n  <h1>\ud074\ub77c\uc6b0\ub4dc \ubcf4\uc548 \uc124\uc815 \uc2e4\uc218 8\uac00\uc9c0 \u2014 \uc9c0\uae08 \ub2f9\uc7a5 \ud655\uc778\ud560 \uccb4\ud06c\ub9ac\uc2a4\ud2b8 (2026)<\/h1>\n  <p>\ube44\uc2fc \ubcf4\uc548 \uc194\ub8e8\uc158\uc744 \ub354 \uc0ac\uae30 \uc804\uc5d0, \ubb34\ub8cc\ub85c 5\ubd84 \uc548\uc5d0 \ub9c9\uc744 \uc218 \uc788\ub294 \uac83\ubd80\ud130.<\/p>\n  <img decoding=\"async\" class=\"hero-img\" src=\"https:\/\/junai.ai\/blog\/wp-content\/uploads\/2026\/06\/hero-10.png\" alt=\"\uc5f4\ub9b0 \uc790\ubb3c\uc1e0\uac00 \ub2ec\ub9b0 \ud074\ub77c\uc6b0\ub4dc \uc11c\ubc84 \uc778\ud504\ub77c\ub97c \ud45c\ud604\ud55c \uc544\uc774\uc18c\uba54\ud2b8\ub9ad \uc77c\ub7ec\uc2a4\ud2b8 \u2014 \uc124\uc815 \uc624\ub958\ub85c \ub178\ucd9c\ub41c \ub370\uc774\ud130 \ud750\ub984\">\n<\/div>\n\n<div class=\"wrap\">\n<article>\n\n<p class=\"lead\">2025\ub144 1\uc6d4, \ud55c \ubcf4\uc548 \uc5f0\uad6c\ud300(Wiz)\uc774 DeepSeek\uc758 \ub370\uc774\ud130\ubca0\uc774\uc2a4 \ud558\ub098\ub97c \ucc3e\uc544\ub0c8\ub2e4. \ube44\ubc00\ubc88\ud638\ub3c4, \ubc29\ud654\ubcbd\ub3c4 \uc5c6\uc5c8\ub2e4. URL\ub9cc \uc54c\uba74 \ub204\uad6c\ub098 \ube0c\ub77c\uc6b0\uc800\ub85c \ub4e4\uc5b4\uac00 \uc0ac\uc6a9\uc790 \ucc44\ud305 \ub85c\uadf8\uc640 API \ud0a4\ub97c \uadf8\ub300\ub85c \ubcfc \uc218 \uc788\uc5c8\ub2e4. \uacf5\uaca9\uc790\uac00 \ubb34\uc5b8\uac00\ub97c &#8220;\ub6ab\uc740&#8221; \uac8c \uc544\ub2c8\ub2e4. \ubb38\uc774 \ucc98\uc74c\ubd80\ud130 \uc5f4\ub824 \uc788\uc5c8\uc744 \ubfd0\uc774\ub2e4.<\/p>\n\n<p>\uc6b0\ub9ac\ub294 \ub370\uc774\ud130 \uc720\ucd9c \uc18c\uc2dd\uc744 \ub4e4\uc73c\uba74 \ubc18\uc0ac\uc801\uc73c\ub85c &#8220;\ud574\ud0b9\ub2f9\ud588\ub2e4&#8221;\uace0 \ub9d0\ud55c\ub2e4. \uadf8\ub7f0\ub370 \ud074\ub77c\uc6b0\ub4dc\uc5d0\uc11c\ub294 \uadf8 \ud45c\ud604\uc774 \ub300\ubd80\ubd84 \ud2c0\ub838\ub2e4. \uce68\uc785(intrusion)\uc774 \uc544\ub2c8\ub77c \ub178\ucd9c(exposure)\uc774\ub2e4. \uc2dc\uc7a5\uc870\uc0ac\uae30\uad00 Gartner\ub294 \uc77c\ucc0d\uc774 &#8220;2025\ub144\uae4c\uc9c0 \ud074\ub77c\uc6b0\ub4dc \ubcf4\uc548 \uc2e4\ud328\uc758 99%\ub294 \ud074\ub77c\uc6b0\ub4dc \uc81c\uacf5\uc0ac\uac00 \uc544\ub2c8\ub77c \uace0\uac1d \uce21 \ucc45\uc784\uc774\uba70, \uadf8 \ud575\uc2ec\uc740 \uc124\uc815 \uc624\ub958&#8221;\ub77c\uace0 \ubabb \ubc15\uc558\ub2e4. 2026\ub144\uc774 \ub41c \uc9c0\uae08\ub3c4 \uc774 \uc9c4\ub2e8\uc740 \uac70\uc758 \uadf8\ub300\ub85c \uc720\ud6a8\ud558\ub2e4.<\/p>\n\n<p>\uadf8\ub807\ub2e4\uba74 \uc911\uc18c \ud300\uc774\ub098 \ud63c\uc790 \uc11c\ubc84\ub97c \uc6b4\uc601\ud558\ub294 \uc0ac\ub78c\uc774 \uc624\ub298 \uc810\uac80\ud574\uc57c \ud560 \uac74 \ubb34\uc5c7\uc77c\uae4c. \ud654\ub824\ud55c \uc81c\ub85c\ud2b8\ub7ec\uc2a4\ud2b8 \uc804\ub7b5\uc774 \uc544\ub2c8\ub77c, \ucf58\uc194\uc5d0\uc11c \ud074\ub9ad \uba87 \ubc88\uc774\uba74 \ub2eb\ud788\ub294 \ubb38 \uc5ec\ub35f \uac1c\ub2e4.<\/p>\n\n<h2>\uc0ac\uace0\uc758 99%\ub294 \uce68\uc785\uc774 \uc544\ub2c8\ub77c \ub178\ucd9c\uc774\ub2e4<\/h2>\n\n<p>\uc774 \ucc28\uc774\uac00 \uc65c \uc911\uc694\ud560\uae4c. \uce68\uc785\uc774\ub77c\uba74 \ub354 \ub450\uaebc\uc6b4 \ubcbd, \uc989 \ub354 \ube44\uc2fc \ubcf4\uc548 \uc7a5\ube44\uac00 \ub2f5\uc77c \uac83\uc774\ub2e4. \ud558\uc9c0\ub9cc \ub178\ucd9c\uc774\ub77c\uba74 \ub2f5\uc740 \uc815\ubc18\ub300\ub2e4. \uc774\ubbf8 \uac00\uc9c4 \uc124\uc815\uc744 \uc81c\ub300\ub85c \uc7a0\uadf8\ub294 \uc77c\uc774 \uba3c\uc800\ub2e4.<\/p>\n\n<p>\uc22b\uc790\uac00 \uc774 \ubc29\ud5a5\uc744 \uac00\ub9ac\ud0a8\ub2e4. \ubcf4\uc548\uc5c5\uccb4 SentinelOne \ubd84\uc11d\uc5d0\uc11c \ud074\ub77c\uc6b0\ub4dc \ubcf4\uc548 \uc2e4\ud328\uc758 95%\ub294 \uc18c\ud504\ud2b8\uc6e8\uc5b4 \uacb0\ud568\uc774 \uc544\ub2c8\ub77c \uc0ac\ub78c\uc758 \uc124\uc815 \uc2e4\uc218\uc5d0\uc11c \ube44\ub86f\ub410\ub2e4. Datadog\uc758 2024\ub144 \ud074\ub77c\uc6b0\ub4dc \ubcf4\uc548 \ub9ac\ud3ec\ud2b8\ub294 \uc804\uccb4 AWS S3 \ubc84\ud0b7\uc758 1.48%\uac00 &#8220;\uc0ac\uc2e4\uc0c1 \uacf5\uac1c&#8221; \uc0c1\ud0dc\ub77c\uace0 \uce21\uc815\ud588\ub2e4. 1.48%\uac00 \uc791\uc544 \ubcf4\uc774\ub294\uac00. \uc804 \uc138\uacc4 \ubc84\ud0b7 \uc218\ub97c \ub5a0\uc62c\ub9ac\uba74 \uc218\uc2ed\ub9cc \uac1c\uc758 \uc800\uc7a5\uc18c\uac00 \uc778\ud130\ub137\uc5d0 \uc5f4\ub824 \uc788\ub2e4\ub294 \ub73b\uc774\ub2e4. Tenable\uc758 2025\ub144 \uc870\uc0ac\uc5d0\uc11c\ub294 \uacf5\uac1c \uc811\uadfc\uc774 \uac00\ub2a5\ud55c \ud074\ub77c\uc6b0\ub4dc \uc2a4\ud1a0\ub9ac\uc9c0\uc758 9%\uac00 \uc2e4\uc81c \ubbfc\uac10 \ub370\uc774\ud130\ub97c \ub2f4\uace0 \uc788\uc5c8\ub2e4.<\/p>\n\n<div class=\"data-box\">\n  <span class=\"big\">$4.44M<\/span>\n  IBM\uc774 \uc9d1\uacc4\ud55c 2025\ub144 \ub370\uc774\ud130 \uc720\ucd9c 1\uac74\uc758 \uae00\ub85c\ubc8c \ud3c9\uade0 \ube44\uc6a9. \uac19\uc740 \ubcf4\uace0\uc11c\uc5d0\uc11c \uc778\uc801 \uc624\ub958\ub294 \uc804\uccb4 \uc720\ucd9c\uc758 \uc57d 26%\ub97c \uc9c1\uc811 \uc720\ubc1c\ud588\ub2e4.\n  <span class=\"src\">\ucd9c\ucc98: IBM Cost of a Data Breach Report 2025<\/span>\n<\/div>\n\n<p>\uc774\uac8c \ucd94\uc0c1\uc801\uc778 \ud1b5\uacc4\ub9cc\uc740 \uc544\ub2c8\ub2e4. 2024\ub144 \ud638\uc8fc\ucd95\uad6c\ud611\ud68c(Football Australia)\ub294 \uc6f9\uc0ac\uc774\ud2b8 \uc18c\uc2a4\ucf54\ub4dc\uc5d0 \ud3c9\ubb38 \ud0a4\ub97c \uadf8\ub300\ub85c \ub178\ucd9c\ud588\uace0, \uadf8 \ud0a4 \ud558\ub098\ub85c 127\uac1c\uc758 \uc2a4\ud1a0\ub9ac\uc9c0 \ucee8\ud14c\uc774\ub108 \u2014 \uc120\uc218 \uac1c\uc778\uc815\ubcf4\uae4c\uc9c0 \u2014 \uac00 \uc5f4\ub838\ub2e4(<a href=\"https:\/\/cloudsecurityalliance.org\/blog\/2025\/06\/09\/the-2024-football-australia-data-breach-a-case-of-misconfiguration-and-inadequate-change-control\" target=\"_blank\" rel=\"noopener\">CSA Top Threats Deep Dive 2025<\/a>). \uac19\uc740 \ud574 \ud398\uac00\uc218\uc2a4\ud56d\uacf5\uc740 \uc798\ubabb \uc124\uc815\ub41c S3 \ubc84\ud0b7\uc5d0\uc11c 6.5TB\uac00 \ube60\uc838\ub098\uac14\ub2e4. \uacf5\ud1b5\uc810\uc740 \ud558\ub098\ub2e4. \ub204\uac00 \uce68\uc785\ud55c \uac8c \uc544\ub2c8\ub77c, \ub0b4\ubd80\uc5d0\uc11c \ubb38\uc744 \uc5f4\uc5b4\ub454 \ucc44 \uc78a\uc5b4\ubc84\ub838\ub2e4\ub294 \uac83.<\/p>\n\n<h2>\uc9c0\uae08 \ub2f9\uc7a5 \uc810\uac80\ud560 \uc124\uc815 \uc2e4\uc218 8\uac00\uc9c0<\/h2>\n\n<p>\uc544\ub798 \ud45c\ub97c \uba3c\uc800 \ud6d1\uc5b4\ubcf4\uc790. \ucf58\uc194\uc744 \uc5f4\uace0 \uc704\uc5d0\uc11c\ubd80\ud130 \ud558\ub098\uc529 \ud655\uc778\ud558\uba74 \ub41c\ub2e4. \ub300\ubd80\ubd84 \uba87 \ubd84\uc774\uba74 \ub2eb\ud78c\ub2e4.<\/p>\n\n<div class=\"tablewrap\">\n<table>\n<thead>\n<tr><th>\uc124\uc815 \uc2e4\uc218<\/th><th>\ubb34\uc5c7\uc774 \uc704\ud5d8\ud55c\uac00<\/th><th>\uc989\uc2dc \uc870\uce58<\/th><\/tr>\n<\/thead>\n<tbody>\n<tr><td>1. \uc2a4\ud1a0\ub9ac\uc9c0 \ubc84\ud0b7 \uc804\uccb4 \uacf5\uac1c<\/td><td data-label=\"\uc704\ud5d8\">ACL\/\uc815\ucc45\uc774 public-read\uba74 URL\ub9cc\uc73c\ub85c \ub204\uad6c\ub098 \ub2e4\uc6b4\ub85c\ub4dc<\/td><td data-label=\"\uc870\uce58\">\uacc4\uc815 \ub2e8\uc704 Block Public Access ON, \ubc84\ud0b7 \uc815\ucc45 \uc7ac\uac80\ud1a0<\/td><\/tr>\n<tr><td>2. API \ud0a4\u00b7\uc2dc\ud06c\ub9bf \ud558\ub4dc\ucf54\ub529<\/td><td data-label=\"\uc704\ud5d8\">\ucf54\ub4dc\ub098 .env\uac00 \uae43\uc5d0 \uc62c\ub77c\uac00\uba74 \uc218 \ubd84 \ub0b4 \ubd07\uc774 \uc2a4\uce94<\/td><td data-label=\"\uc870\uce58\">\uc2dc\ud06c\ub9bf \ub9e4\ub2c8\uc800 \uc0ac\uc6a9, .env\ub294 .gitignore, push \ubcf4\ud638 \ucf1c\uae30<\/td><\/tr>\n<tr><td>3. \ub8e8\ud2b8\u00b7\uad00\ub9ac\uc790 MFA \ubbf8\uc124\uc815<\/td><td data-label=\"\uc704\ud5d8\">\ube44\ubc00\ubc88\ud638 \ud558\ub098\ub9cc \ub6ab\ub9ac\uba74 \uacc4\uc815 \uc804\uccb4 \uc7a5\uc545<\/td><td data-label=\"\uc870\uce58\">\ub8e8\ud2b8\uc640 \ubaa8\ub4e0 \uc0ac\uc6a9\uc790\uc5d0 MFA \uac15\uc81c \uc801\uc6a9<\/td><\/tr>\n<tr><td>4. \uacfc\ub3c4\ud55c IAM \uad8c\ud55c<\/td><td data-label=\"\uc704\ud5d8\">AdministratorAccess \ub0a8\ubc1c \u2192 \ud0a4 \ud558\ub098 \uc0c8\uba74 \uc804\ubd80 \ud138\ub9bc<\/td><td data-label=\"\uc870\uce58\">\uc5ed\ud560\ubcc4 \ucd5c\uc18c \uad8c\ud55c, \uc815\ucc45\uc758 \uc640\uc77c\ub4dc\uce74\ub4dc(*) \uc81c\uac70<\/td><\/tr>\n<tr><td>5. \ubcf4\uc548\uadf8\ub8f9 \uc804\uccb4 \uac1c\ubc29<\/td><td data-label=\"\uc704\ud5d8\">0.0.0.0\/0\uc73c\ub85c SSH(22)\u00b7DB(3306\u00b75432)\ub97c \uc778\ud130\ub137\uc5d0 \ub178\ucd9c<\/td><td data-label=\"\uc870\uce58\">\ucd9c\ubc1c\uc9c0 IP \ud654\uc774\ud2b8\ub9ac\uc2a4\ud2b8, DB\ub294 \ud504\ub77c\uc774\ube57 \uc11c\ube0c\ub137<\/td><\/tr>\n<tr><td>6. \uc800\uc7a5\u00b7\uc804\uc1a1 \uc554\ud638\ud654 \ubbf8\uc801\uc6a9<\/td><td data-label=\"\uc704\ud5d8\">\ubc84\ud0b7\u00b7DB \ud3c9\ubb38 \uc800\uc7a5, HTTP \ud3c9\ubb38 \uc804\uc1a1<\/td><td data-label=\"\uc870\uce58\">\uae30\ubcf8 \uc554\ud638\ud654(at-rest) ON, HTTPS\u00b7TLS \uac15\uc81c<\/td><\/tr>\n<tr><td>7. \ub85c\uae45\u00b7\uac10\uc0ac \ube44\ud65c\uc131<\/td><td data-label=\"\uc704\ud5d8\">CloudTrail\u00b7\uc811\uadfc \ub85c\uadf8\ub97c \uaebc\ub450\uba74 \uc0ac\uace0\uac00 \ub098\ub3c4 \ubaa8\ub984<\/td><td data-label=\"\uc870\uce58\">\uac10\uc0ac \ub85c\uadf8 \ud65c\uc131\ud654 + \uc774\uc0c1 \ud638\ucd9c \uc54c\ub9bc \uc124\uc815<\/td><\/tr>\n<tr><td>8. \uc7a5\uc218 \uc790\uaca9\uc99d\uba85\u00b7\uae30\ubcf8 \ube44\ubc88<\/td><td data-label=\"\uc704\ud5d8\">\ub9cc\ub8cc \uc5c6\ub294 \uc561\uc138\uc2a4 \ud0a4, \uae30\ubcf8 admin \ube44\ubc88 \ubc29\uce58<\/td><td data-label=\"\uc870\uce58\">\ud0a4 \uc815\uae30 \ud68c\uc804, \ub2e8\uae30 \ud1a0\ud070(STS), \uae30\ubcf8 \ube44\ubc88 \uc989\uc2dc \ubcc0\uacbd<\/td><\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n\n<p>\uc5ec\ub35f \uac1c\uac00 \ubaa8\ub450 \ub611\uac19\uc774 \uae09\ud55c \uac74 \uc544\ub2c8\ub2e4. \uc2e4\uc81c \uc0ac\uace0 \ube48\ub3c4\uc640 \ud53c\ud574 \uaddc\ubaa8\ub85c \ubcf4\uba74 1\u00b72\u00b73\ubc88\uc774 \uc555\ub3c4\uc801\uc774\ub2e4. \uc774 \uc14b\ub9cc \uae4a\uac8c \ubcf4\uc790.<\/p>\n\n<h3>\u2460 \ubc84\ud0b7 \uacf5\uac1c \u2014 &#8220;\ud639\uc2dc&#8221; \ub9d0\uace0 \uc9c0\uae08 \ud655\uc778<\/h3>\n<p>\uac00\uc7a5 \ud754\ud558\uace0 \uac00\uc7a5 \uce58\uba85\uc801\uc774\ub2e4. \ubb38\uc81c\ub294 \uc0ac\ub78c\ub4e4\uc774 \ubc84\ud0b7\uc744 \uc77c\ubd80\ub7ec \uacf5\uac1c\ud558\uc9c0 \uc54a\ub294\ub2e4\ub294 \ub370 \uc788\ub2e4. \uc815\uc801 \ud30c\uc77c \ud558\ub098 \ud14c\uc2a4\ud2b8\ud558\ub824\uace0 \uc7a0\uae50 \uc5f4\uc5b4\ub450\uace0 \uc78a\ub294\ub2e4. \uadf8 &#8220;\uc7a0\uae50&#8221;\uc774 \uba87 \ub2ec\uc774 \ub41c\ub2e4. AWS\ub77c\uba74 \uacc4\uc815 \uc804\uccb4\uc5d0 <strong>S3 Block Public Access<\/strong>\ub97c \ucf1c\ub294 \uac8c 1\ucc28 \ubc29\uc5b4\uc120\uc774\ub2e4. \uac1c\ubcc4 \ubc84\ud0b7 \uc815\ucc45\ubcf4\ub2e4 \uacc4\uc815 \ub2e8\uc704 \uc124\uc815\uc774 \uc6b0\uc120\uc774\ub77c, \uc2e4\uc218\ub85c \ubc84\ud0b7\uc744 \uacf5\uac1c\ud574\ub3c4 \ub9c9\uc544\uc900\ub2e4.<\/p>\n<pre>aws s3api get-public-access-block --bucket my-bucket\naws s3api put-public-access-block --bucket my-bucket \\\n  --public-access-block-configuration \\\n  BlockPublicAcls=true,IgnorePublicAcls=true,BlockPublicPolicy=true,RestrictPublicBuckets=true<\/pre>\n<p>\uc124\uc815 \ubc29\ubc95\uc740 <a href=\"https:\/\/docs.aws.amazon.com\/AmazonS3\/latest\/userguide\/access-control-block-public-access.html\" target=\"_blank\" rel=\"noopener\">AWS \uacf5\uc2dd \ubb38\uc11c<\/a>\uc5d0 \uc815\ub9ac\ub3fc \uc788\ub2e4. GCP\u00b7Azure\ub3c4 \uac01\uac01 &#8220;\uacf5\uac1c \uc561\uc138\uc2a4 \ubc29\uc9c0&#8221; \uc635\uc158\uc774 \uc788\uc73c\ub2c8 \uc774\ub984\ub9cc \ub2e4\ub97c \ubfd0 \ub3d9\uc77c\ud558\uac8c \ucf1c\uc790.<\/p>\n\n<h3>\u2461 \ud0a4 \ud558\ub4dc\ucf54\ub529 \u2014 \uc9c0\uc6b0\ub294 \uac8c \uc544\ub2c8\ub77c \ud3d0\uae30\ud558\ub294 \uac83<\/h3>\n<p>\uc5ec\uae30\uc11c \uac00\uc7a5 \ub9ce\uc774 \ud558\ub294 \ucc29\uac01. \ud0a4\ub97c \uc2e4\uc218\ub85c \ucee4\ubc0b\ud55c \uac78 \ubc1c\uacac\ud558\uba74 \uc0ac\ub78c\ub4e4\uc740 \uadf8 \uc904\uc744 \uc9c0\uc6b0\uace0 \ub2e4\uc2dc \ucee4\ubc0b\ud55c\ub2e4. \uc18c\uc6a9\uc5c6\ub2e4. \uae43 \ud788\uc2a4\ud1a0\ub9ac\uc5d0\ub294 \uadf8\ub300\ub85c \ub0a8\uace0, \ud3ec\ud06c\ub41c \uc800\uc7a5\uc18c\uc5d4 \uc601\uad6c \ubcf4\uc874\ub41c\ub2e4. \uac8c\ub2e4\uac00 \uacf5\uac1c \uc800\uc7a5\uc18c\ub294 \ucee4\ubc0b \ud6c4 <strong>\uc218 \ubd84 \uc548\uc5d0<\/strong> \uc790\ub3d9\ud654\ub41c \ubd07\uc774 \uc2a4\uce94\ud55c\ub2e4. \uadf8\ub798\uc11c \uc720\ucd9c\uc774 \uc758\uc2ec\ub418\uba74 \uc21c\uc11c\uac00 \uc815\ud574\uc838 \uc788\ub2e4. \uc0ad\uc81c\uac00 \uc544\ub2c8\ub77c \ud3d0\uae30(revoke)\ubd80\ud130.<\/p>\n<div class=\"warning-box\">\n<b>\uc911\uc694:<\/b> \ub178\ucd9c\ub41c \ud0a4\ub294 \uc0c8 \ud0a4 \ubc1c\uae09 \u2192 \uae30\uc874 \ud0a4 \ud3d0\uae30 \uc21c\uc11c\ub85c. \ucf54\ub4dc \uc815\ub9ac\ub294 \uadf8\ub2e4\uc74c\uc774\ub2e4. GitHub\uc758 <a href=\"https:\/\/docs.github.com\/code-security\/secret-scanning\/about-secret-scanning\" target=\"_blank\" rel=\"noopener\">secret scanning<\/a>\uacfc push \ubcf4\ud638\ub97c \ucf1c\ub450\uba74 \ucee4\ubc0b\ub418\uae30 \uc804\uc5d0 \ub9c9\uc744 \uc218 \uc788\ub2e4.\n<\/div>\n\n<h3>\u2462 MFA \u2014 \ube44\ubc00\ubc88\ud638 \ud558\ub098\uc5d0 \ud68c\uc0ac\ub97c \uac70\ub294 \uc77c<\/h3>\n<p>\ud2b9\ud788 \ub8e8\ud2b8 \uacc4\uc815. \ub8e8\ud2b8\ub294 \ubaa8\ub4e0 \uad8c\ud55c\uc744 \uac00\uc9c0\ubbc0\ub85c, \uc5ec\uae30\uc5d0 MFA\uac00 \uc5c6\uc73c\uba74 \ube44\ubc00\ubc88\ud638 \ud558\ub098\uac00 \uace7 \ud68c\uc0ac \uc804\uccb4\ub2e4. \ubb34\ub8cc\ub2e4. 5\ubd84\uc774\uba74 \ub05d\ub09c\ub2e4. \uadf8\ub7f0\ub370 \uc758\uc678\ub85c 1\uc778 \uc6b4\uc601\uc790\u00b7\uc18c\uaddc\ubaa8 \ud300\uc5d0\uc11c \uac00\uc7a5 \uc790\uc8fc \ube60\uc9c4\ub2e4. &#8220;\ub098\uc911\uc5d0 \ud574\uc57c\uc9c0&#8221; \ud558\uace0 \ubbf8\ub904\ub454 \uadf8 \uacc4\uc815\uc774 \ubcf4\ud1b5 \uac00\uc7a5 \uc704\ud5d8\ud558\ub2e4. \ub8e8\ud2b8\ub294 \ud3c9\uc18c \uc4f0\uc9c0 \ub9d0\uace0, \uc77c\uc0c1 \uc791\uc5c5\uc740 \uad8c\ud55c\uc744 \uc881\ud78c IAM \uc0ac\uc6a9\uc790\ub85c \u2014 \uadf8 \uc0ac\uc6a9\uc790\uc5d0\uac8c\ub3c4 MFA\ub97c.<\/p>\n\n<h2>\uadf8\ub798\ub3c4 \ub6ab\ub838\ub2e4\uba74 \u2014 \ucc98\uc74c 10\ubd84<\/h2>\n\n<p>\uc608\ubc29\uc774 \uc804\ubd80 \ub9c9\uc544\uc8fc\uc9c4 \uc54a\ub294\ub2e4. \uc628\ub77c\uc778\uc5d0\uc11c \ud06c\uac8c \ud654\uc81c\uac00 \ub41c \uc0ac\ub840 \ud558\ub098. \ud55c \ud559\uc0dd \uac1c\ubc1c\uc790\uac00 Gemini API \ud0a4\ub97c GitHub\uc5d0 \uc2e4\uc218\ub85c \uc62c\ub838\ub2e4. \ud0a4\uac00 \ub178\ucd9c\ub41c \ub3d9\uc548 \uc678\ubd80\uc5d0\uc11c \ube44\uc815\uc0c1 \ud638\ucd9c\uc774 \ud3ed\uc99d\ud588\uace0, \uccad\uad6c\uc11c\uc5d0\ub294 <strong>\uc57d 55,444\ub2ec\ub7ec(8,150\ub9cc \uc6d0)<\/strong>\uac00 \ucc0d\ud614\ub2e4. \ub2e4\ud589\ud788 \uc720\ucd9c \uc815\ud669\uc774 \uc785\uc99d\ub3fc \uc804\uc561 \uba74\uc81c\ub410\uc9c0\ub9cc, \ubaa8\ub450\uac00 \uc774\ub807\uac8c \uc6b4\uc774 \uc88b\uc9c4 \uc54a\ub2e4. \uc0ac\uace0\uac00 \ud130\uc84c\uc744 \ub54c \uccab 10\ubd84\uc5d0 \ud560 \uc77c\uc740 \uc774\ub807\ub2e4.<\/p>\n\n<div class=\"fix-step\">\n  <span class=\"fix-num\">1<\/span>\n  <div class=\"body\"><p><strong>\ub178\ucd9c\ub41c \uc790\uaca9\uc99d\uba85 \uc989\uc2dc \ud3d0\uae30.<\/strong> \ucf58\uc194\uc5d0\uc11c \ud574\ub2f9 \ud0a4\u00b7\ud1a0\ud070\uc744 \ube44\ud65c\uc131\ud654\ud55c\ub2e4. \ucf54\ub4dc \uc815\ub9ac\ubcf4\ub2e4 \uc774\uac8c \uba3c\uc800\ub2e4.<\/p><\/div>\n<\/div>\n<div class=\"fix-step\">\n  <span class=\"fix-num\">2<\/span>\n  <div class=\"body\"><p><strong>\ud53c\ud574 \ubc94\uc704 \ud655\uc778.<\/strong> \uac10\uc0ac \ub85c\uadf8(CloudTrail \ub4f1)\ub85c \uadf8 \ud0a4\uac00 \ubb34\uc5c7\uc744 \ud588\ub294\uc9c0 \ubcf8\ub2e4. 7\ubc88\uc744 \ubbf8\ub9ac \ucf1c\ub454 \uc0ac\ub78c\ub9cc \uc774\uac78 \ud560 \uc218 \uc788\ub2e4.<\/p><\/div>\n<\/div>\n<div class=\"fix-step\">\n  <span class=\"fix-num\">3<\/span>\n  <div class=\"body\"><p><strong>\uccad\uad6c\u00b7\uc0ac\uc6a9\ub7c9 \uc54c\ub9bc \ud655\uc778.<\/strong> \ube44\uc815\uc0c1 \ud638\ucd9c\uc774 \uc788\uc5c8\ub2e4\uba74 \uc608\uc0b0 \uc54c\ub9bc\uc744 \uc989\uc2dc \uc124\uc815\ud558\uace0, \uc81c\uacf5\uc0ac\uc5d0 \ube44\uc815\uc0c1 \uc0ac\uc6a9 \uc815\ud669\uc744 \uc2e0\uace0\ud55c\ub2e4.<\/p><\/div>\n<\/div>\n\n<p>7\ubc88(\ub85c\uae45)\uc744 \uac00\uc7a5 \uc9c0\ub8e8\ud55c \ud56d\ubaa9\uc73c\ub85c \ubbf8\ub904\ub450\ub294 \uc0ac\ub78c\uc774 \ub9ce\ub2e4. \ud558\uc9c0\ub9cc \uc0ac\uace0\uac00 \ub0ac\uc744 \ub54c \ub85c\uadf8\uac00 \uc5c6\uc73c\uba74, \ubb34\uc5c7\uc774 \ud138\ub838\ub294\uc9c0\uc870\ucc28 \uc601\uc6d0\ud788 \uc54c \uc218 \uc5c6\ub2e4. \ud3c9\uc18c\uc5d4 \uc548 \ubcf4\uc774\ub2e4\uac00 \uadf8 \uc21c\uac04\uc5d0\ub9cc \uac00\uce58\uac00 \ub4dc\ub7ec\ub09c\ub2e4.<\/p>\n\n<h2>\ub3c4\uad6c\ub97c \ub354 \uc0ac\uae30 \uc804\uc5d0<\/h2>\n\n<p>\uc5ec\uae30\uc11c \uc194\uc9c1\ud574\uc9c0\uc790. \ubcf4\uc548 \uc0ac\uace0\uac00 \ub098\uba74 \uac00\uc7a5 \uba3c\uc800 \ub5a0\uc624\ub974\ub294 \uac74 &#8220;\uc194\ub8e8\uc158\uc744 \ub3c4\uc785\ud558\uc790&#8221;\ub2e4. \uadf8\ub7f0\ub370 \ud1b5\uacc4\ub294 \ub2e4\ub978 \ub9d0\uc744 \ud55c\ub2e4. Fortinet\uc758 2026\ub144 \uc870\uc0ac\uc5d0\uc11c \uc751\ub2f5 \uae30\uc5c5\uc758 69%\uac00 \uc774\ubbf8 <strong>\ub3c4\uad6c \uacfc\uc789(tool sprawl)<\/strong>\uc744 \ubcf4\uc548\uc758 \uac00\uc7a5 \ud070 \uc7a5\ubcbd\uc73c\ub85c \uaf3d\uc558\ub2e4. \ub3c4\uad6c\uac00 \ubaa8\uc790\ub77c\uc11c\uac00 \uc544\ub2c8\ub77c, \ub108\ubb34 \ub9ce\uc544\uc11c \ubb34\uc5c7\uc774 \ucf1c\uc838 \uc788\ub294\uc9c0 \ubaa8\ub974\ub294 \uc0c1\ud0dc\uc778 \uac83\uc774\ub2e4.<\/p>\n\n<p>\ubb3c\ub860 CSPM \uac19\uc740 \uc790\ub3d9 \uc810\uac80 \ub3c4\uad6c\ub294 \uaddc\ubaa8\uac00 \ucee4\uc9c0\uba74 \ubd84\uba85 \ud544\uc694\ud558\ub2e4. \ub2e4\ub9cc \uc21c\uc11c\uac00 \uc788\ub2e4. \uc704 8\uac00\uc9c0\ub294 \uc804\ubd80 \uc81c\uacf5\uc0ac \ucf58\uc194\uc758 \uae30\ubcf8 \uae30\ub2a5\uc774\uace0, \ub300\ubd80\ubd84 \ubb34\ub8cc\uc774\uba70, \ucd94\uac00 \uc194\ub8e8\uc158 \uc5c6\uc774 \uc624\ub298 \ub2eb\uc744 \uc218 \uc788\ub2e4. \ube44\uc2fc \uc790\ubb3c\uc1e0\ub97c \uc0ac\uae30 \uc804\uc5d0, \uc774\ubbf8 \ub2ec\ub824 \uc788\ub294 \uc790\ubb3c\uc1e0\ubd80\ud130 \uc7a0\uadf8\ub294 \uac8c \uba3c\uc800\ub2e4. \ubcf4\uc548 \uc77c\ubc18\uc5d0 \uad00\uc2ec\uc774 \uc788\ub2e4\uba74 <a href=\"https:\/\/junai.ai\/blog\" target=\"_blank\" rel=\"noopener\">JUNAI \ube14\ub85c\uadf8\uc758 \ub2e4\ub978 \uc778\ud504\ub77c\u00b7\ubcf4\uc548 \uae00<\/a>\ub3c4 \ud568\uaed8 \ucc38\uace0\ud560 \ub9cc\ud558\ub2e4.<\/p>\n\n<h2>\ub9c8\ubb34\ub9ac<\/h2>\n\n<p>\ub2e4\uc2dc \ucc98\uc74c\uc758 DeepSeek \ub370\uc774\ud130\ubca0\uc774\uc2a4\ub85c \ub3cc\uc544\uac00 \ubcf4\uc790. \uadf8 \uc0ac\uace0\ub97c \ub9c9\ub294 \ub370 \ud544\uc694\ud588\ub358 \uac74 \ucd5c\uc2e0 \uc704\ud611 \uc778\ud154\ub9ac\uc804\uc2a4\ub3c4, \uc804\ub2f4 \ubcf4\uc548\ud300\ub3c4 \uc544\ub2c8\uc5c8\ub2e4. \uc778\uc99d\uc744 \ucf1c\ub294 \uac83, \ub2e8 \ud558\ub098\uc600\ub2e4.<\/p>\n\n<p>\uc9c0\uae08 \uc774 \uae00\uc744 \uc77d\ub294 \ub2f9\uc2e0\uc758 \uacc4\uc815\uc5d0\ub3c4 \uc544\ub9c8 \uc5f4\ub824 \uc788\ub294 \ubb38\uc774 \ud558\ub098\ucbe4 \uc788\uc744 \uac83\uc774\ub2e4. \ub8e8\ud2b8\uc5d0 MFA\ub294 \ucf1c\uc838 \uc788\ub294\uac00. \uc791\ub144\uc5d0 \ud14c\uc2a4\ud2b8\ud558\ub824\uace0 \uc7a0\uae50 \uc5f4\uc5b4\ub454 \uadf8 \ubc84\ud0b7\uc740 \ub2eb\uc558\ub294\uac00. \uac00\uc7a5 \uc704\ud5d8\ud55c \uac74 \ubaa8\ub974\ub294 \uc704\ud611\uc774 \uc544\ub2c8\ub77c, \uc54c\uba74\uc11c &#8220;\ub098\uc911\uc5d0&#8221; \ubbf8\ub904\ub454 \uc775\uc219\ud55c \uc124\uc815\uc774\ub2e4. \uc624\ub298 \ud45c\uc758 \uc5ec\ub35f \uc904 \uc911, \ud55c \uc904\uc774\ub77c\ub3c4 \uc9c0\uae08 \ud655\uc778\ud574\ubcf4\uae38.<\/p>\n\n<p class=\"meta-foot\">\ucc38\uace0 \uc790\ub8cc: Gartner Cloud Security Prediction \u00b7 IBM Cost of a Data Breach Report 2025 \u00b7 Datadog State of Cloud Security 2024 \u00b7 Tenable 2025 Cloud Security Risk Report \u00b7 Cloud Security Alliance Top Threats Deep Dive 2025. \ubcf8\ubb38 \uc218\uce58\ub294 \uc791\uc131\uc77c(2026-06) \uae30\uc900 \uacf5\uac1c \uc790\ub8cc\ub97c \uc778\uc6a9\ud588\uc73c\uba70, \ud074\ub77c\uc6b0\ub4dc \uc81c\uacf5\uc0ac\ubcc4 \uc124\uc815 \uba85\uce6d\uc740 \ub2e4\ub97c \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n<div class=\"cta\">\n  <p class=\"cta-title\">\uc124\uc815 \uc810\uac80, \ubbf8\ub8e8\uc9c0 \ub9c8\uc138\uc694<\/p>\n  <p>JUNAI Tech\ub294 \uc911\uc18c \ud300\u00b71\uc778 \uc6b4\uc601\uc790\ub97c \uc704\ud55c \uc2e4\uc804 \uc778\ud504\ub77c\u00b7\ubcf4\uc548 \uac00\uc774\ub4dc\ub97c \ubc1c\ud589\ud569\ub2c8\ub2e4.<\/p>\n  <a href=\"https:\/\/junai.ai\/blog\" target=\"_blank\" rel=\"noopener\">\ub354 \ub9ce\uc740 \ubcf4\uc548 \uac00\uc774\ub4dc \ubcf4\uae30<\/a>\n<\/div>\n\n<\/article>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>\ud074\ub77c\uc6b0\ub4dc \uc0ac\uace0\uc758 \ub300\ubd80\ubd84\uc740 \ud574\ud0b9\uc774 \uc544\ub2c8\ub77c \uc124\uc815 \uc2e4\uc218\uc785\ub2c8\ub2e4. \uacf5\uac1c \ubc84\ud0b7\u00b7API \ud0a4 \ud558\ub4dc\ucf54\ub529\u00b7MFA \ubbf8\uc124\uc815 \ub4f1 8\uac00\uc9c0\ub97c \uc989\uc2dc \uc870\uce58 \uc608\uc2dc\uc640 \ud568\uaed8 \uc815\ub9ac\ud55c \uccb4\ud06c\ub9ac\uc2a4\ud2b8.<\/p>\n","protected":false},"author":1,"featured_media":998,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[],"class_list":["post-1003","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-infra"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/junai.ai\/blog\/wp-json\/wp\/v2\/posts\/1003","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/junai.ai\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/junai.ai\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/junai.ai\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/junai.ai\/blog\/wp-json\/wp\/v2\/comments?post=1003"}],"version-history":[{"count":0,"href":"https:\/\/junai.ai\/blog\/wp-json\/wp\/v2\/posts\/1003\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/junai.ai\/blog\/wp-json\/wp\/v2\/media\/998"}],"wp:attachment":[{"href":"https:\/\/junai.ai\/blog\/wp-json\/wp\/v2\/media?parent=1003"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/junai.ai\/blog\/wp-json\/wp\/v2\/categories?post=1003"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/junai.ai\/blog\/wp-json\/wp\/v2\/tags?post=1003"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}