book

Cloud Security Fundamentals

Name: Cloud Security Fundamentals
Author: Jason Edwards
ISBN: 9781394377732

by Jason Edwards

March 2026

Beginner

464 pages

23h 58m

English

Wiley

Read now

Unlock full access

Cover
Table of Contents
Title Page
Copyright
Dedication
Preface
Acknowledgments
Chapter 1: The Strategic Importance of Cloud Security
Cloud as the Default Operating ModelBusiness Drivers and Return on Security InvestmentEvolving Risk Landscape in Cloud ContextsMisconceptions and Shared Responsibility RealitiesCloud Security as a Business EnablerStrategic Alignment Between Security and Enterprise GoalsConclusionRecommendations
Chapter 2: Foundations of Cloud Computing
Historical Roots and Computing ParadigmsCore Cloud Service ModelsDeployment ModelsEnabling Technologies: APIs, Virtualization, and ContainersIaC and Automation FoundationsCloud Economic Models and Abstraction LayersCloud Provider Ecosystems and Market DifferentiationConclusionRecommendations
Chapter 3: The Modern Cloud Security Landscape
Emerging Threats in Cloud EnvironmentsCloud-specific Vulnerabilities and Attack VectorsDeep Dive: Shared Responsibility Model by Service TierLimitations of Legacy Security Models in Cloud ContextsSecurity Investment Patterns and Innovation DriversCloud Security Maturity and Adoption ModelsConclusionRecommendations

Chapter 4: Secure Cloud Architecture and Design
Secure-by-design Principles for Cloud InfrastructureIdentity, Trust Boundaries, and Access ZonesResilience, Redundancy, and High-availability DesignSecure Networking and Micro-segmentation ModelsData Flow Mapping, Isolation, and Asset TieringAvoiding Cloud Security Anti-patternsCompliance-ready Architectural PlanningConclusionRecommendations
Chapter 5: Identity and Access Management (IAM) in the Cloud
Identity as the Security PerimeterAuthentication Protocols and Adaptive TechniquesAuthorization Models: RBAC, ABAC, and Fine-grained AccessPrivileged Access Management (PAM) at Cloud ScaleLifecycle Automation for Identity Provisioning and DecommissioningIAM Risks: Misconfigurations, Sprawl, and AbuseFoundational IAM Architecture and Operational Best PracticesConclusionRecommendations
Chapter 6: Securing Data in Cloud Environments
Data Classification and Inventory Across Cloud AssetsEncryption in Transit, at Rest, and in UseKey Management: HSMs, KMS, Rotation, and EscrowData Residency, Sovereignty, and Jurisdictional ComplianceBackup, Archival, and Disaster Recovery for DataDLP and Leak Surface ReductionConclusionRecommendations
Chapter 7: Monitoring, Detection, and Incident Management
Foundations of Logging and Security Telemetry in the CloudThreat Detection: Real-time Event Correlation and ContextSecurity Monitoring Across Multicloud ArchitecturesIncident Detection and Early Escalation StrategiesAutomation and Orchestration in Incident ResponseMetrics, KPIs, and Threat Intelligence IntegrationPost-incident Review and Root Cause AnalysisConclusionRecommendations
Chapter 8: Security Automation and DevSecOps
DevSecOps Principles and Security Integration ModelsSecure CI/CD Pipeline Design and Control PointsIaC Security and Policy-as-codeManaging Secrets in Automated Development WorkflowsAutomating Compliance Validation in Build PipelinesGovernance Enforcement Through DevSecOps ToolingConclusionRecommendations
Chapter 9: Advanced Architectures and Specialized Domains
Container Security and Kubernetes HardeningServerless and Event-driven Architecture SecurityAPI Security: Design, Authentication, and Rate LimitingSupply Chain and Dependency Risk in Cloud ApplicationsImplementing Zero Trust in Cloud-native EnvironmentsSecurity for Edge, IoT, and Distributed Cloud ModelsResilience Engineering and Chaos Security PracticesConclusionRecommendations
Chapter 10: Cloud Governance, Risk, and Compliance (GRC)
Foundations of Cloud Governance StructuresEnterprise Cloud Risk Management FrameworksMapping Regulatory Frameworks to Cloud ControlsCloud Audit Preparedness and Evidence CollectionSaaS and Third-party Governance Risk StrategiesConclusionRecommendations
Chapter 11: Cloud Hardening and Configuration Management
Core Principles of Secure Configuration and HardeningBaseline Standards for Operating Systems and VMsContainer and Kubernetes Configuration SecurityHardening PaaS and Managed Cloud ServicesEndpoint, Client, and Remote Access ConfigurationIaC for Baseline EnforcementContinuous Validation and Drift Detection WorkflowsConclusionRecommendations
Chapter 12: Cloud Security Testing and Validation
Security Testing Methodologies in Cloud ContextsContinuous Vulnerability Assessment and RemediationCloud-aware Penetration Testing and Provider ConstraintsSecurity Testing in DevSecOps Pipelines (SAST/DAST/IAST)External Testing, Bug Bounties, and Researcher CoordinationPurple Teaming, Simulated Attacks, and Threat-informed DefenseConclusionRecommendations
Chapter 13: Secrets Management and Sensitive Asset Protection
Defining Secrets and Sensitive Credentials in the CloudSecure Secrets Lifecycle: Creation to DeletionCentralized vs. Decentralized Secrets Management ModelsSecrets Management in DevOps and CI/CD WorkflowsJIT Access and Privileged Credential RotationAutomating Secrets Management at ScaleConclusionRecommendations
Chapter 14: Cloud Network Security
Virtual Networking Foundations and Isolation ModelsNetwork Segmentation, Routing, and Secure ZonesCloud Firewall Configuration and Access Control EnforcementWeb Application Firewalls (WAF) and API Gateway SecuritySecure Remote Access and Hybrid Connectivity ArchitecturesTraffic Logging, Packet Inspection, and Anomaly DetectionDistributed Denial of Service (DDoS) Protection, SDN, and Edge Network Security TechniquesConclusionRecommendations
Chapter 15: Identity Federation and Multicloud Access Integration
Identity Federation Concepts and Cross-domain Trust ModelsFederation Protocols: SAML, OAuth, and OIDCFederation Architecture in Multicloud and Hybrid EnvironmentsDesigning Secure and Scalable SSO SystemsSecuring Federated Sessions, Assertions, and TokensGovernance, Logging, and Compliance for Federated AccessConclusionRecommendations
Chapter 16: Serverless and Microservices Security
Core Concepts of Serverless and Microservices ArchitecturesShared Responsibility in Serverless Execution ModelsAuthentication and Authorization Across MicroservicesAPI Gateway Protection and Request Validation TechniquesSecuring Events, Queues, and Triggers in Asynchronous SystemsSecrets and Data Handling in Ephemeral Execution EnvironmentsRuntime Monitoring and Isolation for Distributed WorkloadsConclusionRecommendations
Chapter 17: Data Privacy, Residency, and Protection Obligations
Privacy Fundamentals in Cloud ContextsData Residency, Localization, and Jurisdictional ComplianceApplying Privacy by Design in Cloud ArchitecturesMinimization, Pseudonymization, and Retention StrategiesSubject Access Requests and Erasure ProtocolsPrivacy Risk Assessment and Breach Notification PlanningConclusionRecommendations
Chapter 18: Cloud Compliance and Regulatory Readiness
Regulatory Scope and Interpretation for Cloud ServicesMapping Frameworks: FedRAMP, ISO 27017, CSA CCM, etc.Navigating Multi-jurisdictional and Industry-specific RegulationsAutomated Compliance Monitoring and Control ValidationEvidence Collection, Documentation, and Control TraceabilityCloud Vendor Compliance Oversight and Attestation ReviewStrategic Compliance Roadmapping and Governance AlignmentConclusionsRecommendations
Chapter 19: Cloud Risk Management and Enterprise Integration
Identifying and Categorizing Cloud Risk VectorsEmbedding Cloud Risk into Enterprise Risk FrameworksRisk Quantification, Prioritization, and Response PlanningThird-party, SaaS, and Supply Chain Risk ManagementShadow IT, Unmanaged Assets, and Risk Discovery TechniquesConclusionRecommendations
Chapter 20: Cloud Monitoring, Logging, and Detection
Principles of Observability in Cloud InfrastructureCentralized Logging Strategies Across ProvidersReal-time Detection and Correlation with Native and Third-party ToolsCloud SIEM, SOAR, and Automation IntegrationBehavioral Analytics and Anomaly Detection in Cloud WorkloadsAlert Tuning, Prioritization, and False Positive ReductionMaturity Models for Telemetry, Visibility, and Incident ReadinessConclusionRecommendations
Chapter 21: Cloud Security Metrics and Performance Reporting
Aligning Metrics with Business and Security ObjectivesOperational and Technical Metrics for Cloud Security OperationsCompliance, Audit, and Control Effectiveness IndicatorsTracking Remediation, Drift, and Security Posture TrendsMaturity Models and Continuous Metrics OptimizationConclusionRecommendations
Chapter 22: Threat Intelligence and Attack Surface Management
Strategic Role of Threat Intelligence in Cloud SecurityDiscovering and Mapping the Cloud Attack SurfaceCurating and Consuming External Intelligence FeedsThreat Modeling, Attribution, and PrioritizationIntegrating Threat Intelligence into Detection and ResponseMonitoring Internal and External Attack Vectors ContinuouslyCollaborative Intelligence Sharing and Operational IntegrationConclusionRecommendations
Chapter 23: Incident Response in Cloud Environments
Cloud-aware Incident Response Planning and GovernanceRole Definitions, Escalation Protocols, and Communication PlansDetection, Validation, and Incident CategorizationContainment, Eradication, and Cloud-scale RecoveryForensic Considerations and Evidence PreservationPost-incident Review, RCA, and Corrective ActionsIntegration of IR Playbooks with Cloud Automation and OrchestrationConclusionRecommendations
Chapter 24: Cloud Forensics and Legal Considerations
Foundations of Digital Forensics in Cloud ContextsForensic Readiness: Controls, Logging, and Preservation PracticesIntegration of Forensics into Security Operations Centers (SOCs) and IRJurisdiction, Chain of Custody, and Legal AdmissibilityCollaborating with Cloud Providers During InvestigationsRegulatory Expectations for Investigations and ReportingEmerging Tools, Standards, and Future Forensic ModelsConclusionRecommendations
Chapter 25: Disaster Recovery and Business Continuity in the Cloud
Strategic Foundations of Cloud DR and BCP PlanningCloud DR Models: Backup, Pilot Light, Warm Standby, and Active-activeIdentifying Critical Assets and Defining Recovery ObjectivesAutomated Testing and Validation of DR PlansEnsuring Service Continuity for Distributed Cloud SystemsIntegration of DR with Resilience, Chaos Engineering, and AutomationMaintaining Operational Continuity During Service Disruptions or FailuresConclusionRecommendations
Chapter 26: AI-driven Cloud Security and Automation
Core Concepts of AI and ML in Cloud SecurityAI-enhanced Threat Detection and Behavioral AnalysisPredictive Risk Modeling and Security ForecastingAutonomous Incident Response and Workflow OptimizationAI-augmented Monitoring and Security VisibilityConclusionsRecommendations
Chapter 27: Quantum-ready Security for Cloud Infrastructures
Quantum Computing Fundamentals and Cloud ImplicationsCryptographic Vulnerabilities and Quantum Threat TimelinesPQC: Transition StrategiesQKD and Next-gen Encryption ModelsInventorying and Replacing Classical Cryptographic DependenciesConclusionRecommendations
Chapter 28: Securing Cloud-integrated IoT and Edge Computing
Defining Cloud–Edge and IoT Integration ModelsUnique Threats in Edge and Distributed EnvironmentsLifecycle Management for Devices and Firmware SecurityHardening Edge Infrastructure and Protecting Data FlowsSecure Connectivity Between Cloud, Edge, and DevicesConclusionRecommendations
Index
End User License Agreement

Overview

A hands-on toolkit for securing contemporary cloud environments

In Cloud Security Fundamentals: Building the Foundations for Secure Cloud Platforms, cybersecurity leader and educator, Jason Edwards, delivers a comprehensive guide to safeguarding data, applications, and infrastructure in the cloud. The author offers a complete walkthrough of cloud security, moving from foundational concepts to advanced, forward-looking practices.

The book is filled with practical examples, hands-on guidance, and lessons drawn from real-world cloud security incidents and breaches. It equips readers with the tools and knowledge they need to defend against threats in cloud environments and how to understand coming developments in cloud technology that will impact organizations in all industries.

Inside the book:

A thorough introduction to cloud-native and advanced security practices for contemporary firms
A chapter on relevant cloud security certifications and professional growth advice
Practical discussions of foundational concepts in cloud security, including IAM, Zero Trust, and DevSecOps
Complete treatments of advanced cloud security themes, like leadership strategies, operational best practices, and techniques for dealing with common and emerging threats

Perfect for cloud security professionals, IT managers, and DevOps professionals, Cloud Security Fundamentals will also benefit system administrators, compliance and risk officers, consultants, auditors, and technology students in a variety of fields who require a foundational understanding of cloud security concepts.

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781394377732Purchase Link

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills