Cloud Security
Securing cloud computing environments and services
Cloud Security encompasses the technologies, policies, and controls deployed to protect data, applications, and infrastructure in cloud computing environments.
Cloud Service Models
- Infrastructure as a Service (IaaS) - Virtual machines, storage, networks
- Platform as a Service (PaaS) - Development platforms and databases
- Software as a Service (SaaS) - Applications delivered over the internet
Key Security Areas
- Identity and Access Management - Cloud IAM policies and federation
- Data Protection - Encryption at rest and in transit
- Network Security - Virtual networks, security groups, firewalls
- Compliance - Meeting regulatory requirements in the cloud
- Incident Response - Cloud-native detection and response
Major Cloud Platforms
- Amazon Web Services (AWS)
- Microsoft Azure
- Google Cloud Platform (GCP)
Frameworks and Standards
- Cloud Security Alliance (CSA) guidance
- Shared Responsibility Model
- FedRAMP for government cloud
- SOC 2 for cloud service providers
