Alibaba Cloud ACA Cloud Security
Alibaba Cloud security certification — relevant for organisations with APAC operations or suppliers running on Alibaba Cloud.
Updated
- Alibaba Cloud security architecture and shared responsibility
- Host, network and application protection services: Security Center, WAF, Anti-DDoS Basic and Premium
- Data security and encryption services: KMS, RAM-scoped access
- Identity and access management on Alibaba Cloud
Alibaba Cloud retired the ACA Cloud Security Certification on 13 May 2025 and replaced it with Cloud Security Engineer (Associate). The underlying subject matter is unchanged — network, host and application security services, plus data security on the platform — and the skills stay directly relevant on the Alibaba Cloud work I still do; the credential itself just now sits under a new exam code for anyone earning it going forward.
Related
Alibaba Cloud
Alibaba Cloud security review: RAM permission audit, AccessKey lifecycle, Security Center configuration and cross-border data flow compliance.
Cloud security
Multi-cloud security practice: landing zones, identity, posture management, MITRE ATT&CK-aligned detection engineering and CIS hardening baselines.
Cloud security assessment
Configuration and architecture assessment for Azure, GCP and Alibaba Cloud: identity, network, data, logging and CSPM findings with a fix roadmap.
Cloud architecture review
Design-stage review of cloud and hybrid architecture: trust boundaries, identity model, segmentation, key management and detection design.
Multi-cloud baseline
How to express a single set of security requirements — including AI workload guardrails — across Azure, Google Cloud and Alibaba Cloud without maintaining three unrelated standards.
Security Architects — founder
Independent security consulting practice: cloud and AI security assessments, threat modeling, compliance readiness and CISO advisory.