Module 05 · Cloud Security, Monitoring, Case Studies, Jobs云安全、监控、案例研究、职位
Module 5 Glossary: Cloud Security, Monitoring, Case Studies, & Jobs模块 5 术语表：云安全、监控、案例研究与职位
| Term | Definition |
|---|---|
| Access group | A group of users and service IDs is created so that the same access can be assigned to all entities within the group with one or more access policies 一组用户和服务 ID 被创建，以便将相同的访问权限分配给组内所有实体，并使用一个或多个访问策略 |
| Administrative users | Create, update, and delete application and service instances, and need insight into their team members’ activities 创建、更新和删除应用程序和服务实例，并需要了解团队成员的活动 |
| API keys | Unique identifiers are passed into an API to identify calling application or user 唯一标识符被传递到 API 中以识别调用应用程序或用户 |
| Application Performance Monitoring (APM) | Measures application availability and performance, providing tools needed to troubleshoot issues in an application's environment 评估应用可用性和性能，提供解决应用环境中问题的工具 |
| Application users | Users of the cloud-hosted applications 云托管应用程序的用户 |
| AppSec | Application Security 应用安全 |
| Audit and compliance | A critical service within identity and access framework used to validate implemented controls against policies 一个用于验证实施的控制措施是否符合政策的身份和访问框架中的关键服务 |
| Authentication | Also known as identity service, it enables applications deployed to the cloud to authenticate users at an application level 也称为身份服务，它使部署到云中的应用程序能够在应用层验证用户 |
| BYOK | Bring Your Own Keys 自备钥匙 |
| Client-side encryption | Occurs before data is sent to cloud storage 发生在数据发送到云存储之前 |
| Cloud directory services | Used to securely manage user profiles and associated credentials inside a cloud environment 用于在云环境中安全地管理用户资料及其相关凭证 |
| Cloud encryption | Also known as the last line of defense, it encrypts data and provides robust data access control, key management, and certificate management 也称为最后一道防线，它加密数据并提供强大的数据访问控制、密钥管理和证书管理 |
| Cloud monitoring solutions | Assess data, application, and infrastructure behaviors for performance, resource allocation, network availability, compliance, and security risks and threats 评估数据、应用和基础设施行为以评估性能、资源分配、网络可用性、合规性以及安全风险和威胁 |
| Cloud security | Policies, technological procedures, services, and solutions designed to secure the enterprise applications and data on the cloud against insider threats, data breaches, compliance issues, and organized security threats 政策、技术流程、服务和解决方案，旨在保障企业云应用和数据免受内部威胁、数据泄露、合规问题和有组织的安全威胁 |
| Database monitoring tools | Help track processes, queries, and availability of services to ensure the accuracy and reliability of database management systems 帮助跟踪流程、查询和服务可用性，以确保数据库管理系统的准确性和可靠性 |
| Decryption key | Defines how the encrypted data will be transformed back to legible data 定义加密数据如何转换回可读数据 |
| Developer users | Authorized to read sensitive information and to create, update, and delete applications |
| Encryption | Scrambling data to make it illegible |
| Encryption algorithm | Defines the rules by which data will be transformed so that it becomes illegible |
| Encryption at rest | Protecting data while it is stored 保护存储中的数据 |
| Encryption in transit | Protecting data while it is transmitted from one location to another 保护数据在从一处传输到另一处时的安全 |
| Encryption in use | Protecting data when it is in use in memory |
| Identity and access management | Also known as access control, it helps authenticate and authorize users and provides user-specific access to cloud resources, services, and applications |
| Infrastructure monitoring tools | Identify minor and large-scale hardware failures and security gaps so that developers and administrators can take corrective action before problems affect user experience 识别小规模和大规模硬件故障以及安全漏洞，以便开发人员和管理员在问题影响用户体验之前采取纠正措施 |
| Key management services | Help perform life cycle management for encryption keys that are used in cloud services or customer-build apps 协助进行用于云服务或客户构建应用的加密密钥的生命周期管理 |
| KYOK | Keep Your Own Keys 保留您的密钥 |
| Multifactor authentication | Adds an additional layer or authentication for application users 增加应用程序用户的额外一层认证 |
| Reporting | Provides a user-centric view of access to resources 提供以用户为中心的资源访问视角 |
| Server-side encryption | Occurs after cloud storage receives your data but before the data is written to disk and stored 发生在云存储接收您的数据之后，但在数据写入磁盘并存储之前 |
| SSL | Secure Sockets Layer 安全套接字层 |
| TLS | Transport Layer Security 传输层安全 |
| User and service access management capability | Enables cloud application and service owners to provision and de-provision user profiles with minimal human interaction 使云应用程序和服务所有者能够以最小的人为交互来配置和取消配置用户配置文件 |