MODULE 7: Cloud Security Fundamentals

This module answers a critical question:

What You Will Learn in This Module

By the end of Module 7, you will be able to:

• Understand how security works in cloud environments
• Explain the Shared Responsibility Model clearly
• Understand identity and access control basics
• Understand data encryption concepts
• Identify common cloud security risks
• Apply basic cloud security best practices

Lesson 1: Why Cloud Security Is Different

Traditional vs Cloud Security

In traditional IT:

• Company controls everything
• Security is fully internal

In cloud:

• Infrastructure is shared
• Responsibilities are divided
• Misconfiguration becomes the biggest risk

Cloud security is about correct configuration, not just tools.

Lesson 2: The Shared Responsibility Model (VERY IMPORTANT)

Simple Explanation

Cloud security responsibilities are shared between:

• The cloud provider
• The customer (you)

What the Cloud Provider Secures

• Physical data centers
• Hardware
• Power, cooling
• Physical network
• Underlying infrastructure

What YOU Are Responsible For

• User accounts
• Passwords & MFA
• Access permissions
• Operating systems (IaaS)
• Application security
• Data protection
• Network rules

Most cloud breaches happen because of customer misconfiguration, not provider failure.

Lesson 3: Identity & Access Management (IAM Basics)

What Is IAM?

IAM controls:

• Who can access cloud resources
• What they can access
• What actions they can perform

Identity is the new security perimeter in the cloud.

IAM Key Concepts

• Users
• Groups
• Roles
• Permissions
• Least privilege principle

Best Practices

• Never use admin for daily work
• Use roles instead of shared accounts
• Apply least privilege
• Remove unused users

Lesson 4: Authentication & Authorization

Authentication

Verifies who you are:

• Passwords
• MFA (Multi-Factor Authentication)

Authorization

Determines what you can do:

• Read data
• Modify resources
• Delete systems

Authentication + Authorization = Secure access.

Lesson 5: Data Encryption (Simple & Clear)

Encryption at Rest

• Data stored on disk is encrypted
• Protects against physical theft

Encryption in Transit

• Data encrypted while moving
• Protects against interception

Why Encryption Matters

Even if attackers access storage:

• Encrypted data is useless without keys

Lesson 6: Network Security in the Cloud (Intro Level)

Network Isolation

• Use private networks
• Avoid public exposure

Firewall Rules / Security Groups

• Allow only required ports
• Block everything else

Example:

• Allow HTTPS (443)
• Block unused services

Avoid Common Mistakes

• Open all ports
• Public databases
• Public admin access

Lesson 7: Common Cloud Security Risks

Most cloud attacks happen due to:

• Weak passwords
• No MFA
• Over-permissive access
• Public storage buckets
• Open network ports
• No monitoring

Cloud is secure only when configured correctly.

Lesson 8: Basic Cloud Security Best Practices

IT professionals should always:

• Enable MFA for all admins
• Apply least privilege access
• Regularly review permissions
• Encrypt sensitive data
• Monitor logs
• Backup critical data
• Remove unused resources

These simple practices prevent most cloud incidents.

Lesson 9: Cloud Security in Real-World Environments

Example:

• Company hosts web app in cloud
• Database stays private
• Only app server can access DB
• Admin access protected by MFA
• Logs monitored continuously

This is modern secure cloud architecture.

 MODULE 7 SUMMARIES

By completing Module 7, you now understand:

• How cloud security works
• The shared responsibility model
• Identity & access management basics
• Authentication vs authorization
• Data encryption concepts
• Common cloud security risks
• Best practices for securing cloud systems

This module answers the critical question:

“Is the cloud secure, and what is my responsibility?”