Cloud Architecture Security: CSPM, CASB, Zero Trust

If your cloud environment is a skyscraper, CSPM is the building inspector checking the foundation, while CASB is the security guard checking everyone who walks through the door. In this video, Sec Guy explains the critical difference between securing infrastructure (IaaS) and securing SaaS applications, breaks down Forward vs. Reverse Proxy deployment modes, and shows how a Zero Trust Policy Decision Point (PDP) can stop an identity attack in real-time. New Security+ SYO-801 Study Guide Available today: secguy.org/security-study-guide \[Exam Ready Route - FREE] Pass your certification for $0. ✅ Training Videos & Practice Tests ✅ Sec Guy Mobile Lab (On-the-go training powered by AI voice) ✅ Discord Access (Study sessions & Industry networking) 👉 Start Here: https://secguy.org \[Job Ready Route - MEMBERSHIP] Stop studying and start working. Get the hands-on experience hiring managers are asking for. 🔥 Hands-On Labs: Python, Encryption, Hashing, AI, & CTFs 🔥 Salary Negotiator Workshop 🔥 Experience Builder: Real-world projects to fill your resume 👉 Get Hired: https://secguy.org \[Exam Domain Checklist] This video covers critical objectives for the following exams: Security+ \[ ] Domain 3.2: Cloud Computing Concepts (CASB, CSPM) \[ ] Domain 3.3: Network Designs (Zero Trust: PDP & PEP) \[ ] Domain 5.2: Risk Management (Shadow IT & Data Loss Prevention) CISSP \[ ] Domain 3: Security Architecture (Cloud Security Tools & Deployment Modes) \[ ] Domain 4: Communication & Network Security (TLS Inspection & Proxies) CISM \[ ] Domain 2: Information Risk Management (Cloud Misconfigurations) CRISC \[ ] Domain 2: IT Risk Assessment (Shadow IT Risks) CCSP \[ ] Domain 1: Cloud Concepts (NIST 800-207 Zero Trust) \[ ] Domain 4: Cloud Application Security (CASB Deployment Modes: API, Forward/Reverse Proxy) SecurityX (CompTIA) \[ ] Domain 2.0: Security Architecture (Implementing CNAPP & CASB) GIAC GSEC (SANS) \[ ] Cloud Security: Monitoring & Posture Management AWS CSS (Certified Security – Specialty) \[ ] Domain 2: Infrastructure Security (AWS Config vs. CSPM) Pentest+ (CompTIA) \[ ] Domain 3: Attacks and Exploits (Cloud Misconfigurations & S3 Buckets) CEH (Certified Ethical Hacker) \[ ] Domain 11: Cloud Computing (Shadow IT & Data Exfiltration) SecAI+ \[ ] AI Security: Using AI to Automate CSPM Remediation \[Timestamps] 0:00 - Intro: Tools of the Trade 0:16 - CSPM (Cloud Security Posture Management): The Building Inspector 0:44 - Case Study: Accenture & Twilio (Open S3 Buckets) 1:08 - Shift Left: Scanning Terraform (IaC) in the Build Pipeline 1:28 - CASB (Cloud Access Security Broker): The Bouncer for SaaS 1:50 - CASB Modes: Forward Proxy vs. Reverse Proxy vs. API 2:17 - The Visibility Gap: TLS Inspection & User Privacy 2:42 - Zero Trust Architecture (NIST 800-207): Never Trust, Always Verify 3:00 - The Brain & The Brawn: Policy Decision Point (PDP) vs. Enforcement Point (PEP) 3:28 - Contextual Access: Blocking Impossible Travel (Seattle to London) 3:50 - Free Resources: Zero Trust Logic Map & Labs 4:26 - Outro: Stay Safe, Stay Secure. Original Sec Guy video: https://www.youtube.com/watch?v=GjTDgXsMK60