Cloud Infrastructure
Cloud infrastructure includes remote servers, storage systems, virtual machines, databases, networking resources, and applications delivered through the internet.
Cybersecurity Topic
Cloud Security
Cloud security is the practice of protecting cloud-based systems, applications, data, networks, and user accounts from unauthorized access, cyberattacks, data loss, and configuration mistakes.
Cloud Protection Active
01
Understanding the Cloud
What Is Cloud Security?
Access Protection
Strong authentication, identity management, and access controls help ensure that only approved users can access cloud resources.
Data Protection
Encryption, backups, data classification, and monitoring protect sensitive information while it is stored, transmitted, and processed.
02
Cloud Technology
Cloud Service Models
Cloud services are commonly organized into three major models. Each model gives the customer a different level of control and security responsibility.
IaaS
Infrastructure as a Service
IaaS provides virtual servers, networking, storage, and computing resources that customers can configure and manage.
Customer Responsibilities
- Operating system security
- Application security
- User accounts and permissions
- Firewall and network configuration
Examples: Amazon EC2, Microsoft Azure Virtual Machines
Common for Developers
PaaS
Platform as a Service
PaaS provides a managed platform where developers can build, test, deploy, and manage applications.
Customer Responsibilities
- Application code
- User access
- Application data
- Secure development practices
Examples: Google App Engine, Azure App Service
SaaS
Software as a Service
SaaS delivers complete software applications through a browser or mobile application without requiring local installation.
Customer Responsibilities
- Account security
- Password protection
- Data sharing settings
- Multi-factor authentication
Examples: Google Workspace, Microsoft 365
03
Cloud Environments
Cloud Deployment Models
Public Cloud
Cloud resources are operated by a third-party provider and shared securely among multiple customers.
Flexible and scalablePrivate Cloud
Cloud infrastructure is dedicated to one organization, offering greater control over systems, policies, and sensitive data.
Greater organizational controlHybrid Cloud
Public and private cloud environments work together, allowing organizations to separate sensitive and general workloads.
Balanced flexibilityMulti-Cloud
An organization uses services from multiple cloud providers to improve flexibility, availability, and vendor independence.
Multiple providers
04
Security Ownership
The Shared Responsibility Model
Cloud security is a shared responsibility between the cloud provider and the customer. The provider secures the cloud infrastructure, while the customer secures the information and services placed inside it.
Cloud Provider
Responsible for security of the cloud.
- Physical data centers
- Server hardware
- Storage infrastructure
- Core cloud networking
- Virtualization technology
- Environmental controls
Cloud Customer
Responsible for security in the cloud.
- User identities and passwords
- Application configurations
- Stored data and files
- Access permissions
- Encryption settings
- Operating systems and updates
A cloud provider can secure its infrastructure, but it cannot prevent every customer mistake. Weak passwords, exposed storage, and excessive permissions can still place cloud resources at risk.
05
Cloud Risks
Common Cloud Security Threats
Misconfiguration
Incorrect storage permissions, firewall rules, or access settings can accidentally expose systems and sensitive data.
Stolen Credentials
Attackers may use phishing, malware, or password attacks to gain access to legitimate cloud accounts.
Data Breaches
Sensitive customer, business, financial, or personal data may be viewed or stolen by unauthorized individuals.
Insecure APIs
Weakly protected application programming interfaces can allow attackers to access cloud services and data.
Insider Threats
Employees, contractors, or trusted users may intentionally or accidentally misuse their cloud access.
Account Hijacking
A compromised administrator account can give an attacker control over applications, data, users, and security settings.
Denial-of-Service Attacks
Attackers may flood cloud resources with traffic to slow down applications or make services unavailable.
Malware and Ransomware
Malicious software can spread through cloud systems, steal data, encrypt files, and interrupt business operations.
06
Identity Protection
Identity and Access Management
Identity and Access Management, commonly called IAM, controls who can access cloud resources and what actions each user is permitted to perform.
✓
Least Privilege
Users receive only the permissions required to perform their assigned responsibilities.
✓
Multi-Factor Authentication
Users must provide another form of verification in addition to a password.
✓
Role-Based Access Control
Permissions are assigned according to job roles rather than separately configuring every individual account.
✓
Regular Access Reviews
Administrators periodically review accounts and remove unnecessary, outdated, or excessive permissions.
cloud-access-monitor
> Checking user identity...
✓ Identity verified
> Checking MFA status...
✓ MFA enabled
> Checking permissions...
✓ Least privilege applied
> Session risk level: LOW
07
Information Protection
Protecting Data in the Cloud
Data at Rest
Stored Information
Data stored in cloud databases, virtual disks, backups, and file-storage services should be encrypted and access controlled.
Data in Transit
Moving Information
Information traveling between users, applications, networks, and cloud services should be protected with secure protocols.
Data in Use
Active Information
Data being processed by applications should be protected through secure coding, memory protection, and controlled access.
08
Security Checklist
Cloud Security Best Practices
Enable Multi-Factor Authentication
Require MFA for administrators, employees, remote users, and accounts that can access sensitive cloud resources.
Use Strong Access Controls
Apply least privilege, role-based access control, and separate administrator accounts for high-risk activities.
Encrypt Sensitive Data
Protect data at rest and in transit while carefully managing encryption keys and access to those keys.
Monitor Logs and Activity
Collect cloud logs and review unusual login attempts, configuration changes, file access, and administrator actions.
Secure Cloud Configurations
Regularly scan storage, networks, databases, and virtual machines for unsafe or publicly exposed settings.
Maintain Reliable Backups
Keep protected backups in separate locations and test recovery procedures before an emergency occurs.
Patch Systems and Applications
Install security updates for operating systems, applications, containers, libraries, and cloud workloads.
Create an Incident Response Plan
Establish procedures for isolating compromised resources, investigating incidents, restoring systems, and notifying users.
09
Security Technology
Cloud Security Tools
Cloud Firewalls
Filter incoming and outgoing traffic according to defined security rules.
Security Monitoring
Detect suspicious activity, unauthorized changes, and unusual login behavior.
Configuration Scanners
Identify exposed storage, weak permissions, and insecure cloud configurations.
Key Management
Securely generate, store, rotate, and control access to encryption keys.
SIEM Platforms
Combine logs from cloud services and other systems for centralized monitoring and investigation.
Automated Response
Automatically block suspicious activity, disable accounts, or isolate compromised cloud resources.
10
Cloud Platforms
Major Cloud Providers
AWS
Amazon Web Services
Offers computing, networking, storage, database, identity, monitoring, and security services.
AZ
Microsoft Azure
Provides cloud infrastructure, Microsoft identity integration, virtual machines, applications, and security tools.
GC
Google Cloud
Provides cloud computing, data analytics, machine learning, storage, application hosting, and security services.
Cybersecurity Careers
Careers in Cloud Security
Cloud security professionals help organizations design secure cloud environments, manage identities, protect data, monitor threats, and respond to incidents.
Cloud Security Analyst
Cloud Security Engineer
Cloud Architect
Identity and Access Engineer
DevSecOps Engineer
Cloud Incident Responder
Key Takeaway
Cloud Security Protects More Than Storage
Effective cloud security protects identities, applications, networks, data, workloads, and business operations. It requires strong access control, secure configurations, encryption, monitoring, backups, and cooperation between the cloud provider and the customer.
Return to Top ↑