Category image for Cloud Security

Cloud Security

Cloud security covers the data, settings and workloads a company runs in AWS, Azure or Google Cloud. A CASB (cloud access security broker) polices how staff use cloud apps, CSPM (cloud security posture management) hunts for misconfigurations such as a storage bucket left public, and workload protection guards the servers and containers themselves. The provider secures the data center. The settings are yours.

Related Videos

Cloud Security Explained in 8 Minutes

Cloud security is protecting what a company puts on servers it rents from AWS, Azure or Google. This eight-minute explainer, jokes included, gets to the point at 1:46 with the shared responsibility model: the provider secures the data centers, the customer secures the data, settings and access. At 2:41 the presenter names how breaches happen, misconfigurations, and gives Capital One in 2019 as the example. From 7:11 it turns into career advice. For an owner: the provider's security does not cover the settings your own team chooses.

Full Cloud Security Course for Beginners: What Is Cloud Security?

A 16-minute beginner course that starts one step earlier, with what cloud computing is: the service models at 4:01 and public, private and hybrid clouds at 4:17. Cloud security itself begins at 5:27, and the threats follow at 9:33, from exposed APIs to misconfiguration and insider access. The practitioner's part is the checklist from 12:37: MFA, role based access, least privilege, encryption, segmentation, logging and patching. If you own the business, hand that list to whoever manages your cloud accounts and ask which items are done.