Knowledge is Power

Sitewide Search

Search Bare Metal Cyber

Search exact control and technique identifiers, Cyber Wiki articles, framework records, playbooks, books, podcasts, Academy courses, individual lessons, and BMC Cyber Challenge activities.

Data service conceptBeginner

Cloud Storage Models

Cloud storage commonly uses object, block, and file models, each with different access patterns, performance characteristics, durability options, and security controls.

What it means

Object storage organizes data as objects accessed through APIs, block storage presents volumes to compute systems, and file storage provides shared hierarchical access. Managed archival and specialized data services add further tradeoffs.

Why it matters

Selecting the wrong model can create performance, cost, backup, access-control, and recovery problems. Security design must account for how identities and applications actually access the data.

Practical focus

  • Match storage type to access pattern and recovery needs
  • Use private access and explicit authorization
  • Enable encryption, versioning, and lifecycle controls where appropriate
  • Monitor public exposure and high-volume access

Common mistakes

  • Using object storage like a traditional file server without redesign
  • Granting account-wide storage access
  • Assuming durability replaces backup
  • Ignoring deletion and retention behavior

Certification relevance

This subject appears in or supports the following certification bodies of knowledge:

AWS Cloud PractitionerMicrosoft AZ-900Google Cloud Digital LeaderCompTIA Cloud+GIAC GCLD

Authoritative sources