Learning Cloud Security

Preface

Because cloud resources are so convenient, powerful, and in most cases cost-effective, businesses and individuals alike are making use of them. New businesses can quickly turn up essential information technology resources to enable critical functions. It’s almost like a whole information technology department in a box. Because of this, there are significant security considerations. After all, both companies and individuals want to ensure they are protecting sensitive information. Privacy is becoming more of a worry, especially considering the cloud resources are generally accessible to anyone on the public internet.

As more cloud services become available, the protections necessary evolve. It seems like a good idea to have a single book that consolidates many of the controls and considerations necessary to protect cloud implementations. It’s always a good idea to start with a framework for subject matter like this, and certainly you can look at how each of the major public clouds thinks about security. Because the use of multiple cloud providers is common, having a framework that is vendor agnostic is a good approach. After all, foundational ideas underpin each implementation, so this book sticks with the basics and uses examples from the major cloud providers. The framework for this book is the Certified Cloud Security Professional (CCSP) certification, because it is managed by a highly respected organization, and because it is vendor agnostic.

While you can use this ...