[SC-100] CWPP vs CSPM
Gotta love acronyms and abbreviations, right?
While studying for the SC-100, there's a few terms that kept coming up:
- "Cloud Workload Protection Platform" (CWPP)
- "Cloud Security Posture Management" (CSPM)
I can infer some context based on the names but I was curious to know exactly what the difference was between them. Thankfully, Microsoft has some great documentation here.
At the bottom of the page there's a FAQ that sums it up well:
What's the difference between CWPP and CSPM?
The difference between CWPP and CSPM is what part of the cloud they secure. CWPPs secure workloads running across whatever cloud environments they’re deployed in. CSPM offer similar assessments and automated security processes, but for the cloud infrastructures themselves.