cloud computing strategy and architecture

Download Cloud Computing Strategy and Architecture

Post on 21-Jul-2015




2 download

Embed Size (px)


  • Hendrix Yapputro certified IT architect

    certified ISO 27000 lead auditor cloud security

    Cloud Computing Strategy & Architecture

  • Further Reading

    1. National Institute of Standards and Technology Special Publication 800-145. 2. CompTia Cloud 3. Could Computing Explained: the implementation handbook for enterprise. 4. Architecting the Cloud: Design Decision for Cloud Computing Service Model (SaaS, PaaS, Iaas)

  • Cloud Computing

    Cloud computing is a model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications, and services) that can be rapidly provisioned and released with minimal management effort or service provider interaction.

    National Institute of Standards and Technology Special Publication 800-145

  • Essential Characteristics

    On-demand self-service

    A consumer can unilaterally provision computing capabilities, such as server time and network storage,

    as needed automatically without requiring human interaction with each service provider

    Broad network access

    Capabilities are available over the network and accessed through standard mechanisms that promote

    use by heterogeneous thin or thick client platforms (e.g., mobile phones, tablets, laptops, and


    Rapid elasticity

    Capabilities can be elastically provisioned and released, in some cases automatically, to scale rapidly

    outward and inward commensurate with demand. To the consumer, the capabilities available for

    provisioning often appear to be unlimited and can be appropriated in any quantity at any time.




    National Institute of Standards and Technology Special Publication 800-145

  • Essential Characteristics

    Resource pooling

    The providers computing resources are pooled to serve multiple consumers using a multi-tenant model,

    with different physical and virtual resources dynamically assigned and reassigned according to consumer


    Measured service

    Cloud systems automatically control and optimize resource use by leveraging a metering capability at

    some level of abstraction appropriate to the type of service (e.g., storage, processing, bandwidth, and

    active user accounts).



    National Institute of Standards and Technology Special Publication 800-145


    Business Value of Cloud Computing

  • Business Driver


    Mr. Business Mr. IT

    but, this is the fact




    Business costs have to be efficient for winning business competition. It can be achieved by: 1. Reducing costs for gaining efficiency, and 2. Agility

  • Cost Leadership

    Because of its lower cost, the cost leader is able to charge a lower price than its competitors yet make the same level of profit. If companies in the industry charge similar prices for their products, the cost leader still makes higher profit than its competitors because of its lower costs.

    And, if rivalry within the industry increases and companies start to compete on price, the cost leader will be able to withstand competition better than the other companies because of its lower costs.

    Building competitive advantage through Cost Leadership

    A companys goal in pursuing a cost-leadership strategy is to outperform competitors by doing everything it can to produce goods/service at a cost lower than theirs.

  • Agility

    Cloud Provider Customer Modules

    Business need to rapidly develop new products (particularly applications or web-based services) without being limited by the cost of computing hardware or being stalled by long procurement time

    Shorten time to market 1

    Mobility 3

    Global access to organizational enterprise resources is required for organizations with a distributed workforce.

    Rapid internal development & testing

    The ability to provision and de-provision development and testing environments on demand provides organizations with greater opportunities to improve their business processes by developing applications internally or testing off-the-shelf software in their environment.


    CompTia CompTia Cloud Essential


    Management of Cloud-ready Application

  • Cloud Ready Application

    E N D - T O - E N D M a n a g e m e n t o f C l o u d

    IaaS vs PaaS SLA


    No of Data Center

    Pricing Type of Instance



    Most providers have a set number of servers that can be used, with a specific number of CPUs, amount of memory, and operating system. Others have fully customizable instances.

    There are no standards for PaaS-based applications. Each provider uses different APIs based on its platform. Choosing a specific provider might force a lock-in with a technology that cannot be migrated later to a different provider. Use IaaS unless you are comfortable with the technology used by a PaaS provider and you do not foresee a change in the technology used.

    CompTia CompTia Cloud CompTia Cloud Essential

  • Service Level Agreement

    Data Ownership Data Loss

    Data Location Contract Renewal

    Insurance Contractual Protection

    CompTia CompTia Cloud CompTia Cloud Essential

  • Negotiation of SLA

    Availability of Service

    Liabilities Control of Data

    Choice of Law

    Organizations should raise the issue of contract negotiation with the vendor and choose the law based on their territory coverage

    The cloud provider should disclose the list of data centers used to store the data, including backups. The SLA between the vendor and the organization must also specify how backups are handled.

    Organizations should specify the purpose of contracting with the vendor so that it is clear that, unless the service adequately addresses this purpose, it is pointless to enter into the contract.

    Vendors should have documented management systems, processes, and resources. Organizations should be able to access the average available time provided by the vendors in the different layers of services offered. And consequences for not meeting the SLA must be clearly identified.

    CompTia CompTia Cloud Essential

  • SECURITY Security

  • Cloud Security Principal

    Confidentiality Integrity


    Confidentiality refers to the sensitivity of data.

    Integrity refers to the reliability of data.

    ISO 27000 series

    Availability refers to the accessibility of data. To be available, data needs to be protected from disruption of service.

    Other Security Reference

    CompTia Cloud CompTia Cloud Essential

  • Cloud Security Management Data Security

    Application Security Network Security

    Physical Security

    Security Policy & Procedure

    CompTia Cloud CompTia Cloud Essential

  • Cloud Security Diagram Traditional firewall Virtual firewall

    In/outbound traffic


    CompTia CompTia Cloud CompTia Cloud Essential

  • DEPLOYMENT Deployment

  • Cloud Deployment Model

    Private Cloud

    Community Cloud

    Public Cloud

    Hybrid Cloud

    used by a single user or group of users

    within an organization, the private cloud is

    owned, managed, and operated by the


    used by a group of related organizations with

    shared concerns, such as a group of

    governmental or educational institutions that

    choose to share a common cloud of services

    not available

    to the general public

    Used by the general public, public cloud

    services represent the most thoroughly

    virtualized cloud infrastructural design,

    removing data center information

    resources partially or completely.

    using components of private, community,

    or public clouds, the hybrid cloud provides

    access to two or more infrastructures

    bridged by standardized technologies or

    proprietary cloud services.

    National Institute of Standards and Technology Special Publication 800-145

  • Cloud Service Model

    The capability provided to the consumer is to use the providers applications running on a cloud infrastructure2. The applications are accessible from various client devices through either a thin client interface, such as a web browser (e.g., web-based email), or a program interface. The consumer does not manage or control the underlying cloud infrastructure including network, servers, operating systems, storage, or even individual application capabilities, with the possible exception of limited user-specific application configuration settings.

    Software as a Service

    The capability provided to the consumer is to deploy onto the cloud infrastructure consumer-created or acquired applications created using programming languages, libraries, services, and tools supported by the provider.

    Platform as a Service

    The capability provided to the consumer is to provision processing, storage, networks, and other fundamental computing resources where the consumer is able to deploy and run arbitrary software, which can include operating systems and applications.

    Infrastructure as a Service

    CompTia CompTia Cloud CompTia Cloud Essential

  • Cloud Network Architecture


    For e-mail


    For file transfer