Part V · The infrastructure

AI systems fail as cloud systems more often than they fail as AI systems. An exposed endpoint, an unrotated credential, an over-broad role: the incident board keeps returning the same verdict, and it is rarely the model.

Each part of this book splits the same three ways: how it works, how it breaks, and how you hold it. The attack and the control for one layer sit together, because that is how you actually meet them.

How it works

V.1 Where AI runs - the cloud, from scratch A working cloud course for the AI security tester - rent capability, gated by identity. concept · 13 min read

How it breaks

V.2 Cloud security & red-teaming - AWS, Azure, GCP Testing the cloud substrate under every AI system: IAM privilege escalation, metadata credential theft, exposed storage, and lateral movement. attack · 12 min read

How you hold it

V.3 The data layer - stores & retrieval entitlement Vector databases, data lakes, and cloud connections - the most sensitive, least-hardened part of the stack, and its two recurring failure points. defense · 5 min read