Cloud Security

Cloud security comprises concepts, processes and technical controls to protect data, identities, platforms and workloads in cloud environments. It covers the shared responsibility model, access control, network and configuration hardening, and monitoring. The goal is to ensure confidentiality, integrity and availability of applications and services running i…

Use this profile to understand the building block briefly, place it in the model, and switch to the 360° assessment when needed.

Content type

Concept

Theoretical construct: explains a term, principle, or mental model.

Classification level

Foundation

What you need to understand to reason about a domain.

Available perspectives

Open this building block directly in an already curated view.

360°

In brief

Cloud security in brief

Cloud security comprises technical and organizational measures that protect cloud-based data, services, and identities.

Where does it come from?

It grew from the need to operate distributed infrastructure and shared responsibilities securely. NIST describes public-cloud security and privacy concerns; the approach has no single originator.

The mental model

Divide responsibility into layers: the provider protects cloud infrastructure, the customer configures data, identities, and access, and both monitor operations and incidents. A bad configuration can undermine every layer.

Key building blocks

Shared responsibility

Provider and customer carry different but connected security duties.

Identity and access

Accounts, roles, and permissions control who may use cloud resources.

Secure configuration

Network, storage, and service options must be deliberate and reviewable.

When is it useful?

Cloud security supports architecture, migration, and operations. Responsibility boundaries, data location, key management, and continuous control must fit the service model.

Cloud security — Wikipedia NIST SP 800-144: Guidelines on Security and Privacy in Public Cloud Azure Security Benchmark — GitHub (official)