8 results ·
● Live web index
Y
youtube.com
video
https://www.youtube.com/watch?v=GUnYy5_q9wA
is never just a place to put data. In cloud environments, storage design choices affect confidentiality, integrity, availability, resilience, cost, performance, and compliance all at once. Cloud storage architecture is the way a cloud provider organizes and delivers storage as an on-demand service. Instead of users managing physical discs directly, they consume logical services that expose data through interfaces such as block, file, object or database access. NIS defines cloud computing as [...] keys is a discipline in its own right, not a checkbox. NIS storage guidance also emphasizes areas such as data protection, isolation, restoration, assurance, and encryption. For long-term data, immutability and retention controls are especially valuable because they protect against malicious overwrite and accidental deletion. The best classroom summary is this. Secure cloud storage depends on governance as much as technology. Classify the data. Minimize access. Encrypt consistently, monitor [...] In this video, we will examine cloud storage architectures from a security-focused perspective. We will start by defining what cloud storage architecture is and why it matters in modern cloud environments. Then we will look at three storage types often discussed in cloud security: long-term storage, ephemeral storage, and raw storage. After that, we will compare the most common presentation models used in the cloud: volume storage, object storage, and databases. Finally, we will connect
F
fortinet.com
article
https://www.fortinet.com/resources/cyberglossary/cloud-security-architecture
Secure object storage configuration: Implement proper access controls for cloud storage using IAM policies for indirect access, signed URLs for direct but controlled access to specific resources. Avoid public storage except for non-sensitive, generic resources that are meant to be publicly accessible. [...] While standard cloud architecture optimizes for performance and cost, secure cloud architecture puts security controls first without sacrificing operational efficiency.
Modern cloud computing and cybersecurity management mean that security decisions drive architectural choices. Every component, from data storage to user access, gets evaluated through a security lens before deployment.
### The importance of cloud security architecture [...] Cloud security architecture is the strategic framework that defines how security controls, policies, and technologies protect cloud-based resources.
Unlike traditional security that focuses on network perimeters, cloud computing security architecture operates on the principle that security must be embedded throughout every layer of the cloud stack.
This approach differs from general cloud architecture because it prioritizes data protection and risk mitigation above all else.
O
orca.security
article
https://orca.security/resources/blog/cloud-security-architecture
Data security architecture requires encrypting data at rest and in transit and managing encryption keys so that a compromise of the cloud provider does not automatically compromise the data. AWS Key Management Service, Azure Key Vault, and Google Cloud KMS each support customer-managed encryption keys (CMEK), which ensure the cloud provider cannot decrypt customer data without explicit authorization. NIST SP 800-111 provides the standard for encryption of stored data; NIST SP 800-52 Rev 2 [...] Architecture controls for insider threats include data loss prevention policies on cloud storage, user and entity behavior analytics (UEBA) to detect anomalous access patterns, and separation of duties enforced through IAM policies that prevent any single user from both provisioning resources and modifying audit logs.
## What Are the 10 Key Elements of Effective Cloud Security Architecture?
### 1. Comprehensive Visibility [...] Cloud security architecture determines whether security controls form a coherent defense or function as isolated tools with no shared context. The architecture choices made at design time, around IAM scoping, encryption key management, network segmentation, and IaC security, determine how hard it is for an attacker to move laterally, escalate privileges, and reach sensitive data after initial access.
R
rubrik.com
article
https://www.rubrik.com/insights/what-is-cloud-architecture
Storage: The storage element of a cloud architecture’s back-end encompasses the systems and services that manage and store data, providing accessible, scalable, and durable solutions for applications. It includes various types such as object storage in the form of Amazon S3, block storage like AWS EBS, and file storage like Azure Files. This back-end element ensures you receive data persistence, high availability, and security. [...] Security: The security element of a cloud architecture back-end focuses on protecting data, applications, and infrastructure from unauthorized access, breaches, and other threats. It features measures like encryption, identity and access management, firewalls, and intrusion detection to safeguard resources and protect regulatory compliance. Effective security ensures you have data integrity, confidentiality, and availability while mitigating risks.
## The Advantages of Cloud Architecture [...] Security:To protect your sensitive data and maintain trust, you must implement strong security measures like encryption, identity and access management, and ensure compliance with regulations. By conducting regular security audits and using automated threat detection, you can enhance the resilience of your cloud architecture. Adopting a zero-trust security model also ensures you continuously verify users and devices across all cloud environments, increasing protection and compliance.
C
cheatsheetseries.owasp.org
article
https://cheatsheetseries.owasp.org/cheatsheets/Secure_Cloud_Architecture_Chea…
As an example, consider the architecture below. An API gateway connects to a compute instance (ephemeral or persistent), which then accesses a persistent storage resource. Separately, there exists a server which can verify the authentication, authorization and/or identity of the caller. This is a generic representation of an OAuth, IAM or directory system, which controls access to these resources. Additionally, there exists an Ephemeral IAM server which controls access for the stored resources [...] This architecture prevents less hardened backend components or higher risk services like databases from being exposed to the internet directly. It also provides common, public functionality access to the internet to avoid additional routing overhead. This architecture can be secured more easily by focusing on security at the entry points and separating functionality, putting non-public or sensitive information inside a private subnet where it will be harder to access by external parties. [...] Threat Modeling Cheat Sheet
Attack Surface Analysis Cheat Sheet
CISA Cyber Risk Assessment
## Public and Private Components¶
### Secure Object Storage¶
Object storage usually has the following options for accessing data:
Accessing resources using built-in Identity and Access Management policies
Using cryptographically signed URLs and HTTP requests
Directly accessing with public storage
#### IAM Access¶
G
geeksforgeeks.org
article
https://www.geeksforgeeks.org/cloud-computing/architecture-of-cloud-computing
| Security | Implements robust mechanisms (like Identity and Access Management) to secure cloud resources, networks, and data from unauthorized access. |
| Database | Provides managed environments for storing structured or unstructured data, such as SQL (Amazon RDS) or NoSQL databases. |
| Networking | The infrastructure that directs traffic, including load balancers, DNS, and Virtual Private Networks (VPNs/VPCs). | [...] Storage & Compute: Video tutorials and study materials are reliably hosted in object storage like Amazon S3.
Execution: Small, event-driven backend tasks like instantly grading a coding quiz or updating user progress are executed using serverless compute functions like AWS Lambda.
Security: Services like AWS IAM securely manage student logins and access permissions.
2. E-Commerce Websites (e.g., Amazon, Flipkart) When you browse an online store, you are interacting with the frontend GUI. [...] Backend Services: Cloud services notify the restaurant, assign a delivery driver, and process the payment simultaneously.
Databases & Notifications: Platforms like Firebase store user preferences and trigger real-time push notifications to track your order.
Security: Data centers (like AWS or Google Cloud) host the application servers, ensuring payment details remain highly encrypted and secure.
## Key Benefits of Cloud Architecture
S
seagate.com
article
https://www.seagate.com/blog/cloud-compute-and-cloud-storage-architecture-mas…
Various cloud services provide cloud storage to consumers for free, while others charge some type of subscription-based fee. There are also private clouds that are owned and controlled by an organization, providing a secure network for sharing critical software and data. For example, hospitals can choose to use public archiving services for electronic medical records (EMR) and patient image (using PACS) data, or they can create their own cloud archive solution. In addition, hospitals can pool [...] At the core of all cloud services, products and solutions are software tools with three underlying pillars of functionality–tools for processing data and running applications (compute servers), moving data (networking) and preserving or storing data (storage).
This article discusses cloud compute and storage architectures, drawing on fundamental enterprise and IT data storage knowledge.
## Background and Challenges [...] Cloud computing and cloud storage have become hot topics for addressing common IT problems and challenges while also enabling new opportunities. For some environments, the primary goal is to cut costs, while for others it is to support growth. Additionally, some environments need to enhance service level objectives (SLOs) as well as meet service level agreements (SLAs) for availability, performance, security and data protection.
A
aws.amazon.com
article
https://aws.amazon.com/what-is/cloud-storage
Cloud storage is a cloud computing model that enables storing data and files on the internet through a cloud computing provider that you access either through the public internet or a dedicated private network connection. The provider securely stores, manages, and maintains the storage servers, infrastructure, and network to ensure you have access to the data when you need it at virtually unlimited scale, and with elastic capacity. Cloud storage removes the need to buy and manage your own data [...] ### Business continuity
Cloud storage providers store your data in highly secure data centers, protecting your data and ensuring business continuity. Cloud storage services are designed to handle concurrent device failure by quickly detecting and repairing any lost redundancy. You can further protect your data by using versioning and replication tools to more easily recover from both unintended user actions or application failures.
With cloud storage services, you can: [...] Cost-effectively protect data in the cloud without sacrificing performance.
Scale up your backup resources in minutes as data requirements change.
Protect backups with a data center and network architecture built for security-sensitive organizations.
## How does cloud storage work?