Search for a command to run...
I'm Chandra , Lead Security professional with 10+ years of experience into Cloud security Audits, securing architectures, network security ,host security, security research, SOC and threat hunting/assessments
No comments yet. Be the first to comment.
🎯 Section -1: Introduction Introduction of Cloud and Cloud Concepts. Cloud Architecture, Service Models and Design Cloud Security Concepts Legal, Compliance & Industry Standards Security Challenges 🎯 Session-2: Identity and Access Management Int...
API (Application Programming Interface) security is critical for protecting sensitive data and maintaining the integrity of systems and applications. APIs are used to connect different systems and applications, and as a result, they can provide a gat...
Well after months of deep slumber, away from social media networks, I had to return to Pune and adapt to hybrid working. I was browsing through meetup.com and was intrigued by one event from AWS user group Pune. It is AWS Reinvent 2022 -Recap on 21st...
Episode 2
Simplify Access Control and Enhance Transparency Over Your ML Projects
Episode 1
In the previous introduction blog I have shared different cloud concepts and drivers. Cloud computing is a complex environment. In this blog we will focus on core Architecture building blocks and scenarios in a simple and visual way.
NIST 800-145 describes different components involved in essential characteristics, service Models and deployment as below
Cloud computing architecture is a defined by aggregated model of SOA(Service-oriented architecture) and EDA(Event-driven architecture) . Cloud computing architecture is divided into two parts as below:
Cloud Computing boundaries are offered in 3 service models as below:
I. Infrastructure as a Service (IAAS) : IAAS vendors give low-level abstractions of physical devices. IaaS differs from a regular server in that it offers two key characteristics of cloud technology: virtualization and scalability.
2.Platform as a Service (PAAS): PAAS providers offer managed services like Nodejs, Django etc. Eg:AWS Elastic bean, Google App Engine. These are the environments where developers are able to easily develop advanced software.
3.Software as a Service (SaaS): The third and final service model of the cloud comes with a complete software solution. Here, organizations lease the use of a SaaS application, and users connect to it via the Internet. In simple terms, an Abstraction access from clients to data.
Cloud Computing reference architecture is an abstract model that characterizes and normalizes a cloud computing ecosystem by dividing it into layers of abstraction and cross-layer activites. This model depicts the major actors, their activities and functions as below:
It represent presents an overview of the NIST(National Institute of Standards and Technology) cloud reference architecture.
Now let's dive into different Actors in Cloud Computing
Source:NIST
1.The cloud customer interacts with the cloud broker as opposed to communicating directly with a cloud provider.
2.Cloud Broker can create a new service (mashup) by combining different services or improving an existing service.
3.Actual cloud providers are invisible/hidden to the cloud consumer.
1.Cloud carriers are the intermediary that provides connectivity and transport of cloud services from cloud providers to cloud consumers.
2.The Cloud Provider involves in to two distinct Service Level Agreements (SLA), one with a cloud carrier (e.g.SLA2) and the other with a cloud consumer (e.g.SLA1).
3.The cloud provider may request cloud carrier to deliver dedicated and encrypted connections to ensure the cloud services (SLA's).
1.Independent assessments for the operation and security of the cloud service are conducted by Cloud Auditor.
2.Auditing can involve interactions between the Cloud Consumer and the Cloud Provider.
The public cloud includes a whole host of services and companies. The most common names are AWS and Microsoft Azure, among others. However, you may also hear software as a service, such as Microsoft Office 365, included in the definition.
A private cloud is usually defined as anything behind the walls of an organization. These types of systems function well in a company's local data centers, even though some organizations prefer to use colos(colocated) data center facilities.
A hybrid cloud typically describes a situation in which company is operating both public and private cloud. In general, hybrid cloud environment both the private and public services are integrated with one another.
Now a days, companies are following a multi-cloud strategy, which is the one that leverages any mix of private, public, and hybrid clouds. A multi-cloud strategy is an approach that operates any combination of private, public and hybrid clouds. An Organization may have multiple public and private clouds or multiple hybrid clouds, all either connected together or not.
That's it with basic cloud computing terminology and introduction to Cloud. In next blog, we will start cloud security concepts.
For complete course details, Click here
For Cyber attacks blog series: Click here
YouTube Cloud DevOps Free Trainings
The CloudnLoud community is a non-profit open source tech community, volunteer-run event presented by members of the CloudnLoud Community.
