Aktham AL‐YAHYA, Qasem Abu AL‐HAIJA
This chapter introduces cloud service models and the shared responsibility model, followed by identity and access management, multi-factor authentication and federated identity protocols. It also examines database security from various aspects, including encryption at the data state level, key management, access control models and monitoring. The chapter presents a deep-dive case study of the Capital One breach that demonstrate how misconfigured controls and excessive access can combine in a real-world event. The key findings are that robust authentication, cautious design of privileges and disciplined handling of keys and logs are essential for effective cloud security practices. The chapter concludes with mentions of future directions, such as increased zero-trust adoption, augmented intelligence assistance and risk-based authentication, as well as secure-by-design patterns in cloud database architectures for addressing emerging threats.