Files
nexus/wiki/concepts/cloud-security.md
2026-04-21 20:03:06 +08:00

45 lines
1.7 KiB
Markdown

---
title: Cloud Security
---
# Cloud Security
**Cloud Security** encompasses the technologies, policies, controls, and services that protect cloud-based data, applications, and infrastructure from unauthorized access, data breaches, and other cyber threats.
## Common Misconception
> **Myth**: Cloud computing is not secure.
> **Reality**: Cloud security is often more robust than on-premises solutions.
## Why Cloud Security Often Exceeds On-Premises
- **Massive Investment**: Leading cloud providers (AWS, Azure, GCP) invest billions annually in security infrastructure
- **Encryption**: Data encrypted at rest and in transit by default
- **Multi-Factor Authentication (MFA)**: Built-in identity and access management
- **Compliance Certifications**: ISO 27001, HIPAA, GDPR, SOC 2, and more
- **Automated Security Updates**: Continuous patching without user intervention
- **24/7 Monitoring**: Dedicated security operations centers monitoring threats round-the-clock
- **Advanced Firewalls**: Managed firewall services with DDoS protection
## Core Security Components
| Component | Description |
|-----------|-------------|
| Identity & Access Management (IAM) | Role-based access control, MFA, least privilege |
| Encryption | AES-256 at rest, TLS 1.3 in transit |
| Network Security | VPCs, Security Groups, WAF, DDoS protection |
| Compliance | Automated compliance reporting and auditing |
| Threat Detection | AI/ML-powered anomaly detection and SIEM |
## Related Concepts
- [[Cloud Computing]]
- [[High Availability]]
- [[Multi-Cloud Strategy]]
- [[DevSecOps]]
## Sources
- [[The Myths and Misconceptions About Cloud Computing (LinkedIn)|the-myths-and-misconceptions-about-cloud-computing-linkedin]]