CLOUD SECURITY – COMPLETE EXAM NOTES (15 MARKS)
Cloud Security Meaning:
Cloud security refers to the set of technologies, policies, controls and practices used to protect data, applications
and services stored in the cloud.
Definition:
Cloud security is the process of protecting cloud computing systems from cyber threats, data breaches,
unauthorized access and attacks.
Simple Definition:
Cloud security means keeping cloud data and services safe from hackers and misuse.
Example:
When we store photos in Google Drive or data in AWS, cloud security ensures that only authorized users can
access it.
Real-Life Examples:
• Google Drive security
• Gmail login verification
• Amazon AWS security
• Microsoft Azure security
Why Cloud Security is Important:
• Data is stored online
• Risk of hacking and data theft
• Sensitive personal and business information
• Legal and privacy requirements
• Prevent data loss and downtime
Main Objectives of Cloud Security:
• Protect data
• Prevent unauthorized access
• Ensure data privacy
• Maintain system availability
• Provide secure cloud services
Types of Cloud Security:
1. Data Security:
Protects stored and transmitted data.
Techniques:
• Encryption
• Backup
• Data masking
Example:
Encrypted files in Google Drive.
2. Network Security:
Protects cloud network traffic.
Tools:
• Firewall
• VPN
• Intrusion detection system
Example:
Firewall blocking unknown IP addresses.
3. Application Security:
Protects cloud-based applications.
Methods:
• Regular updates
• Secure coding
• Vulnerability testing
Example:
Secure online banking applications.
4. Identity and Access Management (IAM):
Controls who can access cloud resources.
Includes:
• Username and password
• Multi-factor authentication
• Role-based access
Example:
OTP verification during Gmail login.
5. Physical Security:
Protects cloud data centers.
Includes:
• CCTV cameras
• Biometric access
• Security guards
Example:
Google data centers protected physically.
6. Compliance and Governance:
Ensures legal and regulatory requirements.
Includes:
• Security policies
• Audits
• Data laws
Example:
GDPR compliance.
Cloud Security Tools:
• Encryption
• Antivirus
• Firewalls
• Monitoring tools
• Access control systems
Advantages of Cloud Security:
• Strong data protection
• Automated security updates
• Centralized management
• Disaster recovery support
• High availability
Challenges of Cloud Security:
• Data privacy issues
• Internet dependency
• Shared responsibility model
• Insider threats
• Misconfiguration risks
Cloud Security Best Practices:
• Strong passwords
• Enable multi-factor authentication
• Regular backups
• Access control
• Continuous monitoring
• Security awareness training
Cloud Security and Shared Responsibility:
Cloud provider secures infrastructure.
Customer secures data and access.
Important Exam Lines:
• Cloud security protects cloud environments.
• It ensures confidentiality, integrity and availability.
• It is essential for safe cloud computing.
Summary:
Cloud security is the backbone of cloud computing that protects data, applications and services from cyber threats.