Opening the book…
Learning Objectives
After completing this chapter, students will be able to:
- Describe cloud threat models including external attacks, insider threats, multi-tenancy risks, and misconfiguration.
- Explain the shared responsibility model and how security duties differ across IaaS, PaaS, and SaaS.
- Apply Identity and Access Management (IAM) principles including least privilege, RBAC, ABAC, and MFA.
- Analyze encryption requirements for data in transit and at rest, including cloud key management services.
- Design API security strategies covering authentication, rate limiting, and input validation.
- Implement audit logging and monitoring using cloud-native tools (CloudTrail, Azure Monitor, GCP Audit Logs).
- Evaluate compliance requirements (HIPAA, GDPR, PCI DSS, SOC 2, FedRAMP) and automation approaches.
This page titled 12.9: Assessments was last modified on Tue, 22 Sep 2026 22:01:06 GMT and is shared under a CC BY 4.0 license and was authored, remixed, and/or curated by Felix Amoruwa.
The book could not be loaded just now.