10 Security Best Practices for Cloud Deployments

Security is Not Optional

In 2025, security breaches are more common—and more costly—than ever. Here are 10 practices that will significantly improve your security posture.

1. Use Environment Variables for Secrets

Never hardcode secrets in your codebase.

# Bad
const apiKey = "sk-1234567890";

# Good
const apiKey = process.env.API_KEY;

Dockup encrypts all environment variables at rest and in transit.

2. Enable HTTPS Everywhere

All Dockup deployments include automatic SSL certificates via Let's Encrypt. No configuration needed.

3. Implement Rate Limiting

Protect your APIs from abuse:

app.use(rateLimit({
  windowMs: 15 * 60 * 1000, // 15 minutes
  max: 100 // limit each IP to 100 requests
}));

4. Use Prepared Statements

Prevent SQL injection attacks:

// Bad
db.query(`SELECT * FROM users WHERE id = ${userId}`);

// Good
db.query('SELECT * FROM users WHERE id = $1', [userId]);

5. Validate All Input

Never trust user input. Validate on both client and server.

6. Keep Dependencies Updated

Outdated dependencies are a major attack vector.

# Check for vulnerabilities
npm audit

# Fix automatically
npm audit fix

7. Implement Proper Authentication

Use battle-tested libraries. Don't roll your own auth.

• JWT with short expiration
• Refresh token rotation
• Multi-factor authentication

8. Log Security Events

Maintain audit logs for:

• Failed login attempts
• Permission changes
• Sensitive data access

9. Use Security Headers

app.use(helmet({
  contentSecurityPolicy: true,
  crossOriginEmbedderPolicy: true,
  crossOriginOpenerPolicy: true,
}));

10. Regular Security Audits

Schedule regular penetration testing and code reviews.

Dockup Security Features

We handle security at the infrastructure level:

• WAF Protection: Block common attacks
• DDoS Mitigation: Automatic traffic filtering
• SOC2 Compliance: Enterprise-ready security
• Encrypted Secrets: AES-256 encryption

Conclusion

Security is a journey, not a destination. Start with these basics and continuously improve your security posture.