We are moving to Amazon our on-premise infrastructure and I'm trying to follow this document to increase our security of the ec2 instances : CISecurity Benchmark for Amazon Linux
In the document, it's asked to create 6 differents partitions for: - /tmp - /var - /var/tmp - /var/log - /var/log/audit - /home
I mean, the creation of those separate partitions does increase really the security ? Because cost-wise for me it looks like increasing significantly the cost of each instances by adding 6 different EBS volumes for those partitions...
Thanks for your knowledge sharing.