Internship← Cloud Security learning pathCloud Security · Module 3 of 10
Network security in the cloud
Protect cloud networks.
📖 Key ideas
- Use private subnets for databases and internal services.
- Security groups/firewall rules allow only needed ports.
- Use private endpoints for cloud services.
- WAF protects web apps; DDoS protection services absorb attacks.
- VPN or private links connect offices securely.
💡 Real-life example: Cloud networking is a gated campus: public reception at the front, labs locked deep inside.
Private subnetSubnet without direct internet access
Security groupInstance-level firewall
WAFWeb Application Firewall
Private endpointPrivate IP access to cloud services