Cloud Security 101
An awareness session for college students, freshers, and anyone switching into cloud security - covers cloud computing fundamentals, service/deployment models, and why cloud security is its own discipline.
Key Takeaways
- Cloud computing is the use of servers, storage, databases, networking, software, and analytics delivered over the internet ("the cloud") instead of owned hardware.
- Deployment models: Public Cloud (elasticity, utility pricing, leveraged expertise), Private Cloud (total control, regulation-friendly, flexible), Community Cloud (shared concerns across organizations), and Hybrid Cloud combining them.
- Service models: IaaS (Digital Ocean, GCE, Amazon EC2), PaaS (Beanstalk, Heroku, Google App Engine), SaaS (Gmail, Dropbox, Office365), and XaaS (Database-as-a-Service, Security-as-a-Service).
- Why cloud security is different: the shared responsibility model means the provider secures the cloud, but you're responsible for security in the cloud - misconfiguration, not the platform itself, is the dominant real-world risk.
- Market context: the global cloud security market is projected to grow from ~$20.5B (2022) to ~$148B (2032) - reflecting the scale of demand for this skill set.