Internship← Cloud Security learning pathCloud Security · Module 4 of 10
Data protection
Keep cloud data confidential and recoverable.
📖 Key ideas
- Classify data by sensitivity.
- Encrypt data at rest and in transit (TLS).
- Manage keys with KMS; consider customer-managed keys.
- Block public access to storage buckets by default.
- Back up data with versioning and test restores.
💡 Real-life example: Data protection is a bank: sort valuables, lock them in vaults (encryption), keep spare copies (backups).
Data classificationLabelling data by sensitivity
Encryption at restEncrypting stored data
KMSKey Management Service
VersioningKeeping previous object versions