Key terms and common mistakes
The words you will hear in Cloud Security work and the mistakes that most often cost interns approvals.
Key terms
| Term | Meaning |
|---|---|
| Shared responsibility model | Split of security duties |
| MFA | Multi-factor authentication |
| Private subnet | Subnet without direct internet access |
| Data classification | Labelling data by sensitivity |
| Image scanning | Checking images for known vulnerabilities |
| Audit log | Record of API/admin actions |
| IaC | Infrastructure as Code |
| ISO 27001 | Information security management standard |
Common mistakes to avoid
- Using the root or owner account for daily work.
- Creating long-lived access keys and committing them to Git.
- Opening SSH or RDP to the whole internet.
- Turning off logging to save cost.
- Testing attacks outside legal practice labs or your own account.
Want to go deeper? The free Cloud Security learning path has short modules, games and a certificate for each module.