ccd5

Cloud Security

The practice of protecting cloud environments, data, and applications from unauthorized access, DDoS attacks, malware, and other threats.

Types of Cloud Security Controls

Deterrent, Preventive, Detective, and Corrective Controls.

Deterrent Controls

These controls discourage potential attackers through warnings and policies.

Preventive Controls

Controls designed to eliminate vulnerabilities and prevent attacks.

Detective Controls

Controls that identify and respond to threats, such as intrusion detection systems.

Corrective Controls

These controls limit damage and help recover after an attack.

Security Issues in Cloud Computing

Challenges such as data loss, insecure APIs, account hijacking, and denial of service attacks.

Data Loss/Leakage

Unauthorized access to sensitive data.

Insecure APIs

Public-facing interfaces that are vulnerable to attacks.

Account Hijacking

Unauthorized takeover of user or organizational accounts.

Zero Trust Architecture (ZTA)

A security model that assumes no entity is trusted by default.

Principle of Least Privilege Access

Grant minimal necessary access to users and systems.

Cloud-Native Security Posture Management (CSPM)

Tools that automate the identification and remediation of misconfigurations across cloud environments.

Runtime Security

Protects applications during execution to detect threats and prevent data leaks.

Data Encryption

The process of encoding data before storing or transmitting it in the cloud.

Symmetric Algorithms

Encryption methods using a single key for both encryption and decryption.

Asymmetric Algorithms

Encryption methods that use a public/private key pair.

Security Information and Event Management (SIEM)

Systems that aggregate and analyze security logs.

Secure Access Service Edge (SASE)

A cloud-native framework combining multiple security services.

Post-Quantum Cryptography (PQC)

Encryption algorithms designed to secure data against quantum computing attacks.

Cloud Cost Management (FinOps)

Strategies to optimize cloud spending and ensure cost transparency.

Continuous Compliance

Automated audits to ensure adherence to regulatory requirements.

GitOps

A practice using Git as the single source of truth for infrastructure and application deployment.

Emerging Trends in DevOps

Trends such as AI-driven DevOps, confidential computing, and sustainable cloud computing.