Cloud Security To protect cloud based workloads with data, applications, and Infrastructure environment Cloud Security Concerns Cloud provider’s Security IssuesCustomer Security Issues Cloud security controls Preventive controlsDetective controlsAdministrative ControlsCorrective controlsTransparencyInnovation and Research Cloud Vulnerability and Penetration (C-VAPT) Testing: Cloud VAPT is done with the Cloud provider’s acceptance.White-box testingTest with prior knowledge of internal systems, network configuration, and implementation.Grey-box testingTest with partial knowledge of internal systems, network configuration, and implementation.Black-box testingTest with no prior knowledge of internal systems, network configuration, and implementation.