Files
nexus/wiki/concepts/cloud-security.md
2026-04-21 20:03:06 +08:00

1.7 KiB

title
title
Cloud Security

Cloud Security

Cloud Security encompasses the technologies, policies, controls, and services that protect cloud-based data, applications, and infrastructure from unauthorized access, data breaches, and other cyber threats.

Common Misconception

Myth: Cloud computing is not secure.

Reality: Cloud security is often more robust than on-premises solutions.

Why Cloud Security Often Exceeds On-Premises

  • Massive Investment: Leading cloud providers (AWS, Azure, GCP) invest billions annually in security infrastructure
  • Encryption: Data encrypted at rest and in transit by default
  • Multi-Factor Authentication (MFA): Built-in identity and access management
  • Compliance Certifications: ISO 27001, HIPAA, GDPR, SOC 2, and more
  • Automated Security Updates: Continuous patching without user intervention
  • 24/7 Monitoring: Dedicated security operations centers monitoring threats round-the-clock
  • Advanced Firewalls: Managed firewall services with DDoS protection

Core Security Components

Component Description
Identity & Access Management (IAM) Role-based access control, MFA, least privilege
Encryption AES-256 at rest, TLS 1.3 in transit
Network Security VPCs, Security Groups, WAF, DDoS protection
Compliance Automated compliance reporting and auditing
Threat Detection AI/ML-powered anomaly detection and SIEM

Sources