cloud-security

Cloud Security

Comprehensive cloud security guidance for AWS, GCP, and Azure. Covers IAM, network security, data protection, compliance, and automated security scanning.

"Cloud security is a shared responsibility. Know your side of the shared model."

---

🎯 When to Use

• Securing cloud infrastructure (AWS/GCP/Azure)
• Configuring IAM policies and roles
• Hardening storage (S3, GCS, Blob)
• Setting up network security (VPC, NSG, firewall rules)
• Compliance preparation (SOC2, ISO 27001, PCI-DSS)
• Auditing cloud resources for misconfigurations
• Incident response in cloud environments

---

☁️ Shared Responsibility Model

┌─────────────────────────────────────────────────────────────┐
│                      CUSTOMER                               │
│  ├─ Data security & encryption                              │
│  ├─ Identity & access management                            │
│  ├─ Application security                                    │
│  ├─ OS, network, firewall configuration                     │
│  ├─ Client-side encryption                                  │
│  └─ Server-side encryption (customer-managed keys)          │
├─────────────────────────────────────────────────────────────┤
│                      CLOUD PROVIDER                         │
│  ├─ Physical infrastructure                                 │
│  ├─ Host OS & virtualization                                │
│  ├─ Network infrastructure                                  │
│  └─ Data center security                                    │
└─────────────────────────────────────────────────────────────┘

---

🔐 AWS Security

IAM Best Practices

// Least privilege policy example
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:GetObject",
                "s3:PutObject"
            ],
            "Resource": "arn:aws:s3:::my-bucket/${aws:username}/*",
            "Condition": {
                "Bool": {
                    "aws:MultiFactorAuthPresent": "true"
                }
            }
        }
    ]
}