Lesson Summary: Cloud Security and Monitoring课程总结：云安全与监控

In this lesson, you have learned:
在本课中，您已学到：

• Cloud security refers to the policies, technological procedures, services, and solutions designed to secure enterprise applications and data on the cloud against insider threats, data breaches, compliance issues, and organized security threats. 
  云安全是指为保护企业应用和数据免受内部威胁、数据泄露、合规问题和有组织的安全威胁而设计的政策、技术流程、服务和解决方案。
• Cloud security is a shared responsibility between the cloud provider and the user organization. 
  云安全是云服务提供商和用户组织之间的共同责任。
• Security architecture and methods for achieving continuous security need to be embedded through the life cycle of an application to ensure that the application runs on a safe platform, the code is free from vulnerabilities, and the operational risks are understood. 
  安全架构和实现持续安全的方法需要嵌入到应用程序的生命周期中，以确保应用程序在安全平台上运行，代码无漏洞，且运营风险得到理解。
• Identity and Access Management, also known as access control, helps authenticate and authorize users and provides user-specific access to cloud resources, services, and applications.
  身份和访问管理，也称为访问控制，帮助验证和授权用户，并为用户提供针对云资源、服务和应用的特定访问权限。
• As part of their Identity and Access Management services, most cloud providers offer users the ability to define access groups and create access policies that define permissions for users on account resources.
  作为其身份和访问管理服务的一部分，大多数云服务提供商为用户提供定义访问组和创建访问策略的能力，这些策略定义了用户在账户资源上的权限。
• Cloud encryption, often called the last line of defense, encrypts data and provides robust data access control, key management, and certificate management.
  云加密，通常被称为最后一道防线，对数据进行加密并提供强大的数据访问控制、密钥管理和证书管理。
• Data needs encryption in three states:
  数据需要在三种状态下进行加密：
  • Encryption at rest: Protecting data while it is stored
    静态加密：保护存储中的数据
  • Encryption in transit: Protecting data while it is transmitted from one location to another
    传输中的加密：保护数据在从一个地点传输到另一个地点时的安全
  • Encryption in use: Protecting data when it is in use in memory
    使用中的加密：保护数据在内存中使用时的安全
• All connected systems and cloud-based services should be monitored to maintain visibility of all data exchanges between public, private, and hybrid cloud environments. This ensures that the cloud provides a trusted platform to integrate with your enterprise data centers securely.
  所有连接的系统以及基于云的服务都应进行监控，以保持对公共、私有和混合云环境之间所有数据交换的可见性。这确保了云提供了一个可信赖的平台，以安全地与您的企业数据中心集成。