---
title: "Cloud security | Dhruv Doshi"
description: "Encryption, key management, network segmentation, and defense-in-depth for cloud workloads."
canonical: https://doshidhruv.com/topics/cloud-security/
author: Dhruv Doshi
---

[Skip to content](#main-content)

[Dhruv Doshi](/)

[Work](/projects)[Experience](/resume)[Notes](/notes)[Guides](/guides)[Research](/research)[Investing](/investing)[About](/about)[Contact](/contact)[Search /](/search)dark mode

# Cloud security

Encryption, key management, network segmentation, and defense-in-depth for cloud workloads.

- ["Envelope encryption and KMS design for application teams"](/notes/envelope-encryption-and-kms-design-for-application-teams) · Note · Every application team eventually faces the same requirement: encrypt sensitive data, manage the keys properly, rotate them, and prove it to an auditor. The naive approaches — a key in…
- ["Network segmentation in cloud: VPC design that holds up"](/notes/network-segmentation-in-cloud-vpc-design-that-holds-up) · Note · Cloud networking gives you a green field and a dangerous amount of rope. There is no physical firewall to misconfigure — instead there are security groups, NACLs, route tables, and IAM…

**Dhruv Doshi** · Toronto, Canada · [work@doshidhruv.com](mailto:work@doshidhruv.com)

[Resume](/resume)[Notes](/notes)[Guides](/guides)[Topics](/topics)[Search](/search)[Research](/research)[Investing](/investing)[LinkedIn](https://www.linkedin.com/in/dhruvdoshi25071999)[GitHub](https://github.com/DhruvDoshi)

[Sitemap](/sitemap.xml)[RSS](/feed.xml)[LLMs](/llms.txt)

© 2026 Dhruv Doshi