Chapter 1
Cloud Architecture
Course: Comptia Cloud Cv0 004
Subject: Comptia Cloud Cv0004
Chapter: Security
1. Zero Trust
Definition: Zero Trust is a security architecture that assumes no user, system, or network is trustworthy by default, even if inside the traditional perimeter. Trust must be earned and continuously validated.
Key Principles:
- Always Verify Explicitly: Every access request must be authenticated and authorized using mechanisms like multi-factor authentication (MFA), device identity, and context (e.g., geolocation, time of access). Example: Azure Conditional Access requires sign-ins from unfamiliar locations to pass additional authentication.
- Least Privilege Access: Users and services are only granted the minimum permissions necessary to complete their tasks. Example: In AWS, use IAM policies with scoped-down permissions and temporary access tokens via AWS STS.
- Assume Breach: Continuously monitor, log, and analyze all activities to detect and respond to threats quickly. Example: Use tools like Microsoft Defender for Cloud or AWS GuardDuty to flag unusual behavior.