aspiring cloud sec engineer

Antonina Otieno  • Peerlist

his is a simple Azure networking lab I built to understand how network security actually works in the cloud. The main idea was to separate a public-facing machine from a private backend one, and then control how they talk to each other using Network Security Groups. It’s basically a small zero-trust style setup where nothing is open by default unless I explicitly allow it.

Azure-Segmented-Network-VNet-with-Controlled-

Least Privilege, JIT Access, and Storage Exposure Mitigation: This project was built to explore how IAM misconfigurations and poor access control decisions can create security risks in Google Cloud Platform (GCP). The goal was not just to configure services, but to simulate how cloud environments can become vulnerable through: overprivileged service accounts excessive IAM permissions public storage exposure weak privilege management I then applied security controls to reduce those risks using: least privilege access IAM auditing service account hardening temporary privilege elevation (JIT simulation) storage access remediation This project combines both cloud engineering and cloud security concepts into one practical environment.

GCP IAM & Data Security Hardening

I built a GCP-based secure file upload system to practice cloud security and operations. Implemented automated file handling with: Public → Secure Bucket Workflow: Files uploaded to a public bucket are automatically moved to a secured bucket via Cloud Functions. Encryption: Applied Customer-Supplied Encryption Keys (CSEK) to protect sensitive data at rest. Access Control & IAM: Configured fine-grained IAM roles to enforce least privilege and prevent unauthorized access. Logging & Monitoring: Enabled Cloud Logging and log-based alerting to detect unauthorized file access, creation, and deletion attempts. Alerting: Demonstrated real-time alerts for security violations and access attempts.