Cloud Security Report
Cloud Security Concepts and Best Practices
Shared Responsibility Model
The shared responsibility model in cloud computing defines the division of responsibilities
between the cloud provider and the customer. Cloud providers, such as AWS and Azure,
manage the security of the cloud, including infrastructure, hardware, and software maintenance.
Customers, on the other hand, are responsible for security in the cloud, including data
protection, identity and access management, and application-level controls.
Security Best Practices for Major Cloud Providers
1. Identity and Access Management (IAM): Use IAM policies to enforce least privilege,
ensuring users and systems have only the permissions they need.
2. Data Encryption: Encrypt data in transit and at rest using provider-native tools such as
AWS KMS or Azure Key Vault.
3. Regular Monitoring: Implement continuous monitoring using services like AWS
CloudTrail or Azure Security Center.
4. Backup and Disaster Recovery: Create regular backups and enable disaster recovery
solutions such as AWS Backup or Azure Site Recovery.
5. Network Security: Configure firewalls, use Virtual Private Clouds (VPCs), and enable
DDoS protection tools.
Common Cloud Security Threats and Vulnerabilities
● Misconfigurations: Improperly set permissions or public buckets.
● Unauthorized Access: Weak passwords or exposed credentials.
● Data Breaches: Loss of sensitive data due to insufficient encryption or access controls.
● Denial of Service (DoS) Attacks: Overloading systems, making resources unavailable.
● Compliance Violations: Failing to meet standards like SOC 2 or HIPAA.
Cloud Security Compliance Frameworks
1. SOC 2 (System and Organization Controls 2): Focuses on data security, availability,
and confidentiality.
2. HIPAA (Health Insurance Portability and Accountability Act): Ensures the protection
of health-related data.
3. ISO/IEC 27001: Provides a systematic approach to managing sensitive information.
4. GDPR (General Data Protection Regulation): Governs the handling of personal data
for EU residents.
Practical Analysis of AWS Security Features
Platform Overview
For this report, I selected AWS as the cloud platform. AWS offers a wide range of built-in
security features and tools to help organizations secure their workloads and data.
Security Features and Settings
1. Identity and Access Management (IAM):
● IAM users and roles are created to define access permissions.
● Multi-factor authentication (MFA) is enabled for all users.
● Policies are assigned using JSON files to enforce least privilege.
2. Encryption and Data Protection:
● Amazon S3 buckets are configured with server-side encryption (SSE).
● AWS Key Management Service (KMS) is used to manage encryption keys.
● SSL/TLS is enabled for data in transit.
3. Monitoring and Logging:
● AWS CloudTrail is enabled to log all API calls.
● Amazon GuardDuty monitors suspicious activity.
● CloudWatch provides real-time monitoring and alerts.
4. Network Security:
● A Virtual Private Cloud (VPC) is configured for isolation of resources.
● Security Groups and Network Access Control Lists (NACLs) restrict traffic.
● AWS Shield Advanced protects against DDoS attacks.
5. Compliance Tools:
● AWS Config monitors compliance with security standards.
● Audit Manager helps automate evidence collection for frameworks like SOC 2 and
HIPAA.
Potential Security Risks
1. Misconfigured S3 Buckets: Public access settings could expose sensitive data.
2. Overly Permissive IAM Policies: Broad access roles might lead to unauthorized
access.
3. Unmonitored Resources: Lack of regular audits could allow unnoticed vulnerabilities.
References
1. AWS Documentation: Shared Responsibility Model. Retrieved from
https://aws.amazon.com
2. Azure Security Best Practices. Retrieved from https://azure.microsoft.com
3. Cloud Security Alliance. “Top Threats to Cloud Computing.” Retrieved from
https://cloudsecurityalliance.org
4. SOC 2 Compliance Overview. Retrieved from https://aicpa.org
5. HIPAA Compliance Guidelines. Retrieved from https://hhs.gov
