0% found this document useful (0 votes)
16 views27 pagesCC Unit 2
The document provides an overview of cloud computing, including its definition, types (private, public, hybrid, and community), and service models (IaaS, PaaS, SaaS). It highlights the benefits of cloud computing such as cost reduction, scalability, and remote access, while also discussing the characteristics and advantages of different cloud types. Additionally, it explores the concept of a community cloud, emphasizing its potential for shared resources and sustainability.
Uploaded by
syfacts219Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF or read online on Scribd
0% found this document useful (0 votes)
16 views27 pagesCC Unit 2
The document provides an overview of cloud computing, including its definition, types (private, public, hybrid, and community), and service models (IaaS, PaaS, SaaS). It highlights the benefits of cloud computing such as cost reduction, scalability, and remote access, while also discussing the characteristics and advantages of different cloud types. Additionally, it explores the concept of a community cloud, emphasizing its potential for shared resources and sustainability.
Uploaded by
syfacts219Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF or read online on Scribd
/ 27
Introduction to Cloud
Computing
Introduction to Cloud Computing : Definition, Types of Clouds, Deployment of software solutions and wed applications,
typ
f Cloud Platforms, Essential characteristics ~ On-demand self-service, Broad network access, Location independent
resource pooling Rapid elasticit
Measured service, Comparing cloud providers with traditional IT service providers.
3.1 Cloud Computing
= Cloud computi
pricing, Th
local or per
type of computing relies on sharing a pool of physical and virtual resources, rather than deploying
onal hardware and software,
pired by the cloud symbol that is often used to represent the Internet in diagrams,
ge and small businesses use cloud computing, either directly or indirectly. The big players in the
-on (AWS), Microsoft (Azure), Google (Google CloudPlatform), and Rackspace (OpenSeack
© Costs reduction is probably the n
in driver of the wide use of cloud computing among businesses. Cloud computing
helps businesses reduce overall IT cos ss of scale.
s in multiple ways. First, cloud providers enjoy massive economi
Effective use of physical resources duc to statistical multiplexing brings prices lower, S-7 times.
© Then, multiple pricing models, especially, the pay-per-use model, allow customers to optimize costs, Cloud
mput
ng brings
Jown IT labor costs and gives access to a full-featured platform at a fraction of the cast of
traditional infrastructure, Unive
is another advantage of cloud computing.
« Itallows remote employees to access applications and work via the Internet. Other important benefits include a choice
of appli
With flexible capacity, the orga
ations, flexible capacity, up-to-date software, potential for greener communication, and speed and agility.
tions need not be concerned about over/under-provisioning for a service.
3.1.1 Cloud Services Models
«Services in cloud computing have different levels of support, according to what is offered to clients. There are
three classes of services, named laa (Infrastructure as a Service), PaaS (Platform as a Service) and SaaS
(Software as a Service).
+ Ingeneral, X (everything) as a Service (XaaS) is a collective term used to refer to any services thar are delivered
over the Internet, rather than locally.
storage,
type of service clients are provided with process
(a) Infrastructure as a Service (IaaS) : In
network bandwidth, and other computing resources, being able to reconfigure them as needed.
‘The clients do not own, manage, or control the underlying infrastructure; instead, they rent it as & SeHvic® by
paying only for what is used. This eliminates the need for customers to set up and maintain their physical
resources, The service provider supplies virtual hardware resources (e.g, CPU, memory, storage, load balancer,
virtual LANs, ete). Amazon Elastic Compute Cloud (Amazon EC2), Eucalyptus, OpenNebuls and Openstack are
examples of providers in this class.
@ scanned with OKEN Scanner ce
OO _—_———_—_
introduction to Cloud Compyy,
Cloud Computing and Web Services 32
wvelopment, testin
rnvironment for the de a
+ In this class clients get an (memory, Storage, PFOCESSOrs, ey
of the platform environment.
unlike laa where us,
ty Forth
'F operating system, application software, server size, et. and patches are controlled ang
maintenance of the system, PaaS operating system updates, versions,
implemented by the vendor.
(b) Platform as a Service (Paas)
: ure
‘ployment of their applications, disregarding the needs af infrastruct
uration
‘The customer has control over the applications and some of the confi
taas. Hence,
not over the infrastructure; this is the main difference between PaaS at
; te responsi
jntain comple!
select the na
Google Apps and Microsoft Azure are examples of services inthis cass.
with clients demanding
(9) Software as a Service (Saas) ‘
here the applications are the service provided, time, from any los
“ecution of specific programs. The applications are accessible to the customers, at a 7 Smee onal
and with any device, through a simple interface such as a web browser. The client has the
infrastructure or even the application,
3.2__ Types of Cloud
‘The cloud can be deployed in four types private, public, hybrid, and community cloud, An additional type isthe
community cloud, which is less commonly used.
(a) Private cloud
(b) Public cloud
(Hybrid cloud
(4) Community cloud
(2) A private cloud is built and managed within a single organization, Organizations use software that enables cloud
functionality, such as VMWare, vCloud Director, or OpenStack.
(0) A public cloud is a set of computing resources provided by third-party organizations. 1
‘he most popular public
clouds include Amazon Web Services, Google AppEngine, and Microsoft Azure,
(6) Ahybrid cloud is a mix of computing resources provided by both private and Public clouds,
(4) A community cloud shares computing resources across several organizations, and can be
managed by either
organizational IT resources or third-party providers
(a) Private Cloud
* Private clouds are those that are built exclusively for single business. For many
They allow the o}
ina cloud, while ad
control that can arise in the public cloud environment.
'Y Companies considering cloud
reanization to host applications
dressing conce
computing, private clouds are @ good starting point,
development environments, and infrastructure a
Ms regarding data security’
+ There are two kinds of private clouds
())_ On-Premises Private Cloud :
* This model, also known a5 an “Internal Goud” hosted wih ag
benefits of a virtualized, scalable, exible private pceanization’s own data center: MH
are undeniable
Cloud infrastructure
7 A
@ scanned with OKEN Scanner Cloud Computing and Web Services 33 Introduction to Cloud Computing
+ Building and managing a private cloud enables you to pool hardware, storage, network, Web, and
virtualization resources for more cost-effective, flexible, dynamic, and on-demand requirements. Advances
in virtualization and distributed computing have allowed company network and data center administrators
to effectively become service providers that meet the needs of their “customers” within the business.
‘+ Users across the company can have self-service access and increased scalability. Also like a public cloud, a
private cloud also makes provisioning an automated service request rather than a manual task processed by
IT. It provides a much more standardized set of processes and protection than a traditional in-house IT
infrastructure provides. On-Premises Private Clouds are very effective for applications that require
complete control and configurability of the infrastructure and security.
+ Inan On-Premises or Internal Private Cloud environment, the customer owns all of the equipment powering
the private cloud, has complete responsibility for the IT resources as well as the data, and is fully
accountable for securing it. So, unlike a public cloud, setting up shop in a private cloud requires expertise
with network integration as well as with sophisticated virtualization and cloud platform technologies; you'll
have to run your hardware, storage, networking, hypervisor for virtualization, and cloud software.
* Typically, the internal IT department sets up, tests, and manages the cloud infrastructure. Thus, costs can be
larger than choosing 4 public cloud. You still need to pay for servers and to deal with infrastructure,
security, and backup, which in a public cloud is the provider's job. The result is that large enterprises are the
‘ones most likely to have both the expertise and budget to implement internal private clouds.
(ii) Hosted Virtual Private Cloud:
‘+ This private cloud model is hosted by a third-party Cloud Service Provider. The provider creates an
exclusive private cloud environment and takes responsibility for implementing, securing, and managing the
Cloud infrastructure.
* This approach is recommended for organizations that want the benefits of moving thelr infrastructure,
systems, and data off-site but prefer not to use a pure public cloud infrastructure with the multi-tenancy
sharing of applications,
* An excellent example of an externally Hosted Virtual Private Cloud is DynaSis’ ITility Cloud Solution for
small businesses.
(b) Public Cloud
‘The public cloud is a series of computing services available on the public Internet. It includes Software-as-a-
serviceapplications such as Salesforce.com or Google's Gmail, software development Platforms as a Service, such
as Microsoft's Azure, and Infrastructures as a Service from a wide range of vendors. The major benefits of the
public cloud are that it can
© Reduce costs
+ Itcan improve cash flow by converting capital investments to operating expenses
+ Itishighly scalable.
+ Itprovides universal accessibility, and
‘+ Applications and data are automatically backed up and upgraded.
‘+ However, the public cloud simply isn’t the ultimate best choice for every small business.
‘+ With the exceptions of some new businesses and a handful of existing companies who have implemented
brand new systems ~ no business data and computer resources reside completely in the public cloud today.
One reason is that most Public Cloud applications run on a multi-tenant basis.
Techiwaledae
@ scanned with OKEN Scanner Cloud Computing and Web Services
(©) Hybrid Cloud
eer
Introduction to Cloud Com,
34 yeing processed by the
isb
What this means is that
* data, Sam
* though your data is segregated from others’ dat hundreds, or even thousange
senate of application software code that is also being used by dozens, @
other companies,
ic Software as a Service,
While this architecture provides ‘many of the efficiencies and benefits of| mo Doms, understang
‘aise concerns for some businesses go lean ud sere Provders such a Doms unde fae
yeaa’ AY Prefer to keep certain applications or data on-premis lized hardware or ope
from having legacy software installed in-house - especially if it requires specializ rating
ing R&D or other highly confide
aetems not available in the public coud, Italso could result from having R&D or “a
Gata that business is reluctant o process off-site,
‘ones
some com,
i ‘louds prox
hs ls Why private clouds are an attractive soon for many small businesses. Private clouds provide
; lly avait
ability to more directly manage resources require a higher level of control than is normally ay
‘rom the public cloud. Yet they still otter ‘many of the benefits of cloud computing.
Ahybrid cloud be an interesting Spportunity for taking advantage of the best of the private and public cloug
You can choose to mai
Sintain some systems and data in-house while using external services where they way
be more effective for y
| an organization may choose to continue to use their
stand keep sensitive data secured on their network. And lke the Public cloud, a hybrid
model lets an organization take advantage of a clouds scalability, accessibility, backup, and disaster
micovery. 18s a way to address some of the limitations of the Public cloud while still gaining many ofthe
Public cloud’s benefits
Tea
@ scanned with OKEN Scanner Cloud Computing and Web Services 35 Introduction to Cloud Computing
| (@) Community Cloud
* Community clouds are the integration of services of different clouds to achieve the specific needs of an
industry, a community, or a business sector.
‘+ The cloud infrastructure is shared by several organizations and supports a specific community that has
shared concerns (e.g, mission, security requirements, policy, and compliance considerations). It may be
‘managed by the organizations or a third party and may exist on premise or off:premise.
+ Community cloud arises from concerns over Cloud Computing, specifically control by vendors and lack of
environmental sustainability.
* The Community Cloud aspires to combine distributed resource provision from Grid Computing, distributed
control from Digital Ecosystems, and sustainability from Green Computing, with the use cases of Cloud
Computing, while making greater use of self-management advances from Autonomic Computing. Replacing
vendor Clouds by shaping the underutilized resources of user machines to form a Community Cloud, with
nodes potentially fulfilling all roles, consumer, producer and most importantly coordinator.
evelopment
Platforms
Private
Users
Industies
Enterprises|
Public Services|
Fig. 3.2.2: Community Cloud
© The conceptualisation of the Community Cloud draws upon Cloud Computing, Grid Computing, Digital
Ecosystems, Green Computing, and Autonomic Computing.
* A paradigm for Cloud Computing in the community, without dependence on Cloud vendors, such as Google,
Amazon, or Microsoft.
Advantages of Community cloud
1. Openness
Removing dependence on vendors makes the Community Cloud the open equivalent to vendor Clouds, and
therefore identifies a new dimension in the open versus proprietary struggle that has emerged in code,
standards, and data, but has yet to be expressed in the realm of hosted services.
Ted
@ scanned with OKEN Scanner n to Cloud Computing
Introd
3
Cloud Computing and Web Services
Community gm, because of the community
paradi
, technology
+ The Community Cloud is as much a social structure a5 &
‘ownership of the infrastructure. ished competition ang
dimini
e would be
«+ Carrying with ita degree of economic scalability without which ther
potential stifling of innovation as risked in vendor Clouds.
Individual Autonomy in which dedi
y trast with data centers, in which dedicateg
tra
+ Inthe Community Cloud, nodes have their utility functions in cot ree nee solfnterest Enralzeg
7 re
machines execute software as instructed. So, with nodes expect
practical, as with consumer electronics like game consoles.
sronics like ga
‘elfinterest results in cracked systems, from bi
* Attempts to control user machines counter to their s "i
P use i and securing the software (routinely lost by
market hardware modifications and arms races over hackins
the vendors).
ist tt avoid antagonizi
‘+ Inthe Community Cloud, where no concrete vendors exist, itis even more Important to igonizing
: unity wi
the users, instead embracing their self-interest and harnessing it for the benefit of the community with
measures such as a community currency.
4, Identity
+ In the Community Cloud each user would inherently possess a unique Identity, which combined with the
structure of the Community Cloud should lead to an inversion of the currently predominant membership
model, So, instead of users registering for each website (or service) anew, they could simply add the website
to their identity and grant access.
* Allowing users to have multiple services connected to their identity, instead of creating new identities for
each service. This relationship is reminiscent of recent application platforms, such as Facebook's and
Apple's App Store, but decentralized and so free from vendor control, Also, it allows for th f the
, e reuse of
connections between users, akin to Google's Friend Connect, instead of re-estab thing them for each new
1em for each ne\
application,
5. Graceful Failures
* The Community Cloud is not owned or controlled by any one organis
a
the lifespan or failure of any one organization, and therefore not dependent 08
It therefore ought to be robust and resilient to fail
lure, and immi
7 une to the s,
ystem-
1 nodes,
gracefully, non-destructively, and with minimal downtime, the unaff When occasi
the unat
the failure. fected nodes m
‘wide cascade failures of
‘ionally failing to do s°
vendor Clouds, because of the diversity of its Supportin,
‘obilize to compensate for
SF ERE EEE EEE EE EEaa eee EE EEEEE
@ scanned with OKEN Scanner Introduction to Cloud Computing
6. Convenience and Control
= The Community Cloud, unlike vendor Clouds, has no inherent conflict between convenience and control,
resulting from Its community ownership providing distributed control, which would be more democratic.
= However, whether the Community Cloud can provide technically quality equivalent or superior to its
centralized counterparts fs an issue that will require further research.
7. Community Currency
‘+ The Community Cloud would require its currency to support the sharing of resources, a community
currency, which in economics is a medium (currency), not backed by a central authority (eg, national
ment), for exchanging goods and services within a community.
© Itdoes not need to be rest
ted geographically, despite sometimes being called a local currency.
8. Quality of Service
uring acceptable quality of service (QoS) in a heterogeneous system will be a challenge. Not least
because achieving and maintaining the different aspects of QoS will require reaching critical mass in the
participating nodes and available services.
+ The community currency could support long-term promises by resource providers and allow the higher
quality providers, through market forces, to command a higher price for their service provision.
Interestingly, the Community Cloud could provide a better QoS than vendor Clouds, utilizing time-based and
‘geographical yariations advantageously in the dynamic scaling of resource provision.
9. Environmental Sustainability
© We expect the Community Cloud to have a smaller carbon footprint than vendor Clouds, on the assumption
that making use of underutilized user machines requires less energy than the dedicated data centers
required for vendor Clouds.
+ ‘The server farms within data centers are an intensive form of computing resource provision, while the
Community Cloud is more organic, growing and shrinking in a symbiotic relationship to support the
demands of the community, which in turn supports it.
10. Service Composition
«The great promise of service-oriented computing is that the marginal cost of creating the nth application
will be virtually zero, as all the software required already exists to satisfy the requirements of other
applications.
‘© Only their composition and orchestration are required to produce a new application. Within vendor Clouds
itis possible to make services that expose themselves for composition and compose these services, allowing
the hosting of complete service-oriented architecture,
‘+ However, current service composition technologies have not gained widespread adoption.
+ Digital Ecosystems advocate service composability to avoid centralized control by large service providers,
because easy service composition allows coalitions of SMEs to compete simply by composing simpler
services into more complex services that only large enterprises would otherwise be able to deliver.
Tedhtnowledge
@ scanned with OKEN Scanner Introduction to Cloud Computing
Cloud Compan
ng aud Web Ser
38
he service layer, to enay,
vision and up to U le
* So: we should extend decentralization beyond resource provision
* composition within the Community
(e) Multi-cloud
cloud et ervices, often from different providers. Organi
malt 7 puting servic rol
leverage specialized services from different provid 4
sta Ratio
nd applications across mutin,
Improve redumdaney and d orkloads and ap} le
opt for multi-cloud strate,
id vendor lock-it
aster recovery. It involves managing WO
cloud environments
3.3_Deployment of Software Solutions and Web Applications
them available
‘The deployment of software solutions and we applications involves the process of making and
“Sperational for users. Following steps are performed inthe deplayment process :
1. Pre-Deployment Planning
* Define clear objectives and goals fr the deployment process.
Ensure thatthe software or web application is thoroughly tested and ready for production.
2. Infrastructure Setup
* Prepare the required infrastructure, including servers, databases, networking, and storage resources,
* Choose an appropriate deployment environment, whether i's on-premises cloud-based, ora hybrid setup,
3. Configuration Management
* Configure the necessary software components, dependencies,
and settings for the application to function
correctly.
* Setup environment variables, database connections, security configurations, and other relevant parameters.
4. Version Control and Release Management
+ Use version control systems (such as Git) to manage code versions and tra
ck changes,
+ Follow releas
management practices to ensure a smooth deployment process,
Deployment Strategy Selection
Choose an appropriate deployment strategy, such as blue-green deployment, canary deployment, rolling
deployment, or others based on the specific needs ofthe application,
6. Automated Deployment Tools
Utilize deployment automation tools like Jenkins, Ansible, Puppet, or Kubernetes to automate the deployment
r 0
process. Automation reduces errors and streamlines deployment. mate the deploy
7. Deployment Execution
Execute the deployment process according to the chosen strategy. This may involve d ipset of
ze 7 it
servers, gradually siting aio deploying updates withou downting, eee
ee
Ted
@ scanned with OKEN Scanner Cloud Computing and Web Services 39 Introduction to Cloud Computing
8. Monitoring and Validation
+ Monitor the deployment process in real-time to ensure its progress and identify any issues or errors that
arise,
* Validate the deployed application or solution to confirm its functionality and integrity.
9. Rollback Plan
Prepare a rollback plan in case of deployment failures or unexpected issues. This plan should enable reverting to
the previous stable version quickly.
10. Post-Deployment Tasks
‘+ Perform post-deployment tasks, such as database migrations, cache warming, or configuration adjustments.
+ Conduct performance testing and User Acceptance Testing (UAT) to ensure that the application functions as
‘expected in the production environment.
11. Documentation and Knowledge Transfer
+ Document the deployment process, configurations, and any troubleshooting steps for future reference.
© Conduct knowledge transfer sessions with the operations team to familiarize them with the deployed
solution,
12. Continuous Monitoring and Maintenance
‘+ Implement continuous monitoring tools to monitor the application's performance, security, and health.
‘© Regularly maintain and update the application, including applying security patches, bug fixes and feature
enhancements.
3.4 Types of Cloud Platform/Reference Models
* Cloud service models describe how cloud services are made available to clients. Most fundamental service
models include a combination of IaaS (infrastructure as a set
), PaaS (platform as a service), and SaaS
(softwareas a service).
‘+ These service models may have synergies between each other and be interdependent - for example, PaaS is
dependent on laaS because application platforms require physical infrastructure. PaaS deals with whole
computing platforms provided as a service such as operating system environments.
‘© Eg, Google Chrome OS running on Google Chrome Books. laaS aims to provide the whole computing power
(computer clusters) for the application domain so we don’t have to worry about the physical machines and how
they are deployed,
3.4.1 IaaS/HaaS (Infrastructure / Hardware as a Service)
+ Infrastructure as a Service isa form of hosting. Il
includes network access, routing services and storage.
Techinowledge
@ scanned with OKEN Scanner Prosentation
Piatto,
: APIs
‘Applications
[am J[oetaa ] Contont
Coro connoctiviy
Introduetion to Cloud Computing
Cloud details
Abstraction
Hardware
‘Abstraction
Haroware
i Faciities
SaaS.
Presentation | [ Presentation
Modality Plattorm
APIs
Applications
Data
Metadata] | Content
Fig. 3.4.1 : Cloud Service Models
The laaS provider will generally provide the hardware an
and a pla
form for running applications.
Scaling of bandwidth, memory, and storage
c
memory, storage, load balancer, virtual LANs, etc).
are generally included, and v
and pricing offered on their dynamic services. The service
«administrative services needed to store applications
‘endors compete on the performance
Provider supplies virtual hardware resources (ef
The service provider owns the equipment and is responsible
for housing, run
ning, and maintaining it. laaS
Purchased with either a contract or ona pay-as-you-go basis, '# and maintaining it. laaS canbe
However, most buyers consider the key
nefit of laa to
need to pay for the resources that your application det
EC2), Eucalyy ebula
of providers in this
be the flexibility of the
Pricing, since you should oalf)
TY requires
Amazon Elastic Compute Cloud (Amal
7 eats
a
class,
@ scanned with OKEN Scanner Cloud Computing and Web Services 341 Introduction to Cloud Computing
3.4.2 PaaS (Platform as a Service)
+ Platform as a Service (PaaS) is a way to rent hardware, operating systems, storage, and network capacity over
the Internet. The service delivery model allows the customer to rent virtualized servers and associated services
for running existing applications or developing and testing new ones.
+ The infrastructure layer is the lower level layer, abstracting and usually virtualizing the hardware layer.
Different virtualization concepts are targeting operating systems, hardware, CPUs and embedded systems,
networks and storage.
+ These enable a homogenous virtualized environment on which to install and execute specific software.
Furthermore, this is the scale-in and scale-out layer. If required, extra infrastructure nodes can be deployed to
overcome computing needs. When not needed, these nodes can again be decommissioned. The infrastructure can
be made av.
ible as a service, where users may gain access to virtualized servers.
* This service allows a user to provision and spawn an infrastructure and run his selected software stack. This is
an on-demand service, as the infrastructure can grow or shrink with the load fluctuations. It is usually the client's
responsibility to manage most of the software stack and make sure that the application running on the cloud can
scale horizontally with the addition of new nodes.
+ The startup and shutdown process of extra nodes is requested via an interface (usually a web service). When in a
commercial business model, the charges are calculated on CPU/h usage. A storage service is usually associated
with an laaS, where charges are based on GB transferred and/or stored per month.
PaaS provides IT organizations with significant benefits :
‘+ Improved time to market with minimal capital costs. Developers can accelerate the production of new cloud
applications through access to a broad set of automated tools and technologies that enable them to design and
deploy cloud-aware applications more quickly. Reduced development cycle time enables more new products to
reach the market faster. With the ability to start, test, and deploy software projects dramatically reduced, IT also
can support limited-duration projects such as marketing campaigns.
‘+ Access to services that are available only in the cloud. Developers can customize, extend, and integrate Software
as a Service (SaaS) offerings from public cloud providers by selecting specific functionality to be delivered as a
service through the PaaS platform. The solution is tailored to user needs so that Line-Of-Business (LOB)
managers are less likely to pursue shadow IT initiatives.
* Ability to rehost or re-architect legacy applications to run in the cloud, often with minimal changes. Porting
existing applications can cut IT operational costs, increase agility, broaden reach, and enable developers to focus
on core competencies rather than the complexities of legacy infrastructure.
3.4.3 SaaS (Software as a Service)
+ SaaS stands for “Software as a Service’, and it essentially refers to software that is hosted on servers and is
provided asa service.
+ Some initial uses for SaaS included customer relationship management offerings, content management systems,
video conferencing, and e-mail communication systems.
‘+ SaaS applications are provided over the web, which means they can be accessed from any computer without any
special software installed. Many applications are designed to run through a standard web browser. When
updates to a SaaS application need to be installed, they are simply installed on the server, whi
ensures that all users are running the latest version.
immediately
@ scanned with OKEN Scanner OES ’S ' ZT
Cloud Computing and Web Services 3:12,
urchase,
Unlike traditional software applications that require an upfront pure
Introduction Cloud Comp,
saaS applications typically gp
10d for delivering sof,
i, SaaS is a method wan
subscription-based pricing and are usualy licensed on a per-uset basis a service can be purchased wig, q
‘hat provides remote access to software as a web-based service. The 50!
‘monthly fee and paid as you go,
(2) Advantages of Saas
Easy to use : Most SaaS applications do not require more than a web browser t0 Tun. eee
Cheap The pay-as-you-go pricing model of SaaS makes it affordable to small a lees
Scalability : Saas applications can be easily scaled up or down to meet consumer demand, mers do
Hot need to worry about additional computing infrastructure to scale up.
Applications are less prone to data loss since data is being stored in the cloud. ;
Compared to traditional applications, SaaS applications are less clunky. They do not require users y
‘nstall/uninstall binary code on their machines, 5
Due to the delivery nature of Sass through the internet, SaaS applications can run on.a wide variety of devices,
Velocity of change in SaaS applications is much faster: Software changes and frequent and on-demand, Most
SaaS services are updated about every 2 weeks and users are most time unaware of these changes.
(b) Drawbacks of Saas
Robustness : SaaS software may not be as robust (functionality wise) as traditional software applications
due to browser limitations. Consider Google Doc & Microsoft Office.
Privacy : Having all of a user's data sit in the cloud raise:
Usually the target of hack exploits,
Security : Attack detection, malici
's security & privacy concerns. SaaS providers are
us code detection,
Reliability : In the rare event, such as DDoS attacks a
SaaS provider going down,
clients could be affected,
a wide range of dependent
Table 3.4.1 : Cloud Computing Services classifi
ication
Sr. | Category Characteristics Product Type Vendors and Products
No.
1. | sas Customers are provided with | Web applications ana SalesForce.com (CRM)
applications that are accessible | services (Web 29) a,
5 larizen.com
anytime and from anywhere,
(project management)
Google Apps
2. | Pas Gustomers are provided witha | Programming aPis
and | ¢ i ft
platform for developing frameworks woe AppEngine ewe
applications hosted in the cloud, Deployment systems a Manjrasoft Aneka
Synapse
3 | faas/taas | Customers are provided with | Virtual machine nm 3
virtualized hardware and | management mazonEC2 and
storage on top of which they can infrastructure storage | POTANIFvanix
build their infrastructure, management Networy
management
a
eee |
@ scanned with OKEN Scanner Cloud Computing and Web Services 343. Introduction to Cloud Computing
3.5 _ Essential Characteristics of Cloud Computing
Cloud computing has some interesting characteristies that are beneficiary to both Cloud Service Consumers
(CSCs) and Cloud Service Providers (CSPs). These characteristics are :
Characteristics of Cloud Computing
1, Automatic service on demand
2, Rapid Elasticity
3, Measurable Services
4, Multiple tenants
'5 Sharing of the pool of resources
%. Access through a worldly distributed]
network
7. Service Orionted
'B. Dynamic resource provisioning
9, Sel-organization
10, Price-based uflities
Fig, 3.5.1 : Characteristics of Cloud Computing
4. Automatic service on demand : Computational services are provided automatically, without human
intervention over the service provider;
Rapid Elasticity : Services must be fast and made available whenever necessary. Users of them must feel as they
have unlimited resources, which can be acquired in any amount, anytime. The elasticity property appears in
three components: linear scalability, use by demand, and payment of what is consumed;
3. Measurable Services : The management systems used by the cloud must control and monitor each resource,
automatically, for each kind of service (storage, processing, and bandwidth). This monitoring must be
transparent for both entities involved (service provider and user).
4, Multiple tenants : In a cloud environment services owned by multiple providers can be located in a single
. datacenter. With this approach the issues with performance and management of these services can be dealt by
all service and the infrastructure providers. The layered architecture offers a natural division of duties, that is,
the owner of each layer will have to deal only with the specific goals associated with that layer. Unfortunately,
the multiple tenancies also create problems in the understanding and management of the interactions between
parts.
5. Sharing of the pool of resources : The infrastructure provider offers a pool of resources that can be
dynamically allocated to the resource consumers. This capability creates a great flexibility to the cost-effective
management of resources. As an example, a service provider can take advantage of the technique of VM
migration in order to maximize resource utilization, what implies in the reduction of costs associated with
cooling and power consumption.
: TechKnowledge
@ scanned with OKEN Scanner Cloud Computing and Web Services 314 Introduction to Cloud Computing
6. Access through a worldly any
device connected to it, either a cell phone or a desktop, is capable of using the cloud services. Even more, in order
tributed network : Clouds are usually accessible from the Internet, therefore,
to achieve a high performance and availability, many of the current clouds are composed by several datacenters
distributed over the world.
7. Service Oriented : Cloud computing adopts a service-oriented operational model, putting a strong emphasis in
service management. Each provider offers his service trying to guarantee a Service Level Agreement (SLA),
which is negotiated with the users of that service.
8. Dynamic resource provisioning : Differently from conventional systems, where resources are fixed, in clouds
we have the capability of dynamically adjust the amount of offered resources by the acqui
extra resources by the service provider, guided by current demands.
9. Self-organization : The property of dynamic resource provisioning implies in the ability of providers and clients
to adjust their resources upon demand. Resources can be allocated or returned to the pool depending the current
needs. This flexibility results in the elasticity property.
10, Price-based
ition and publishing of
ities : Cloud computing uses an economical model based in “pay what you use”. The exact price
of processing may be different for different services. For example, a software provider may rent a VM ina by-
hour basis, while other may charge the service by the number of clients served. Although services priced by-use
may reduce client's costs, they introduce difficulties in the management of the whole operation.
Computing
Fig. 3.5.2
Cloud computing systems and technologies reduced maintenance costs and operational costs related to IT
software and resources. This is mainly because users have
to pay for these resources as long as they are using and not
paid for up front.
Users can access their IT resources whenever and wherever they
Want to, At consumer's side resources are not
stored on actual physical system,
hence it reduced maintenance costs: by renting the infrastructure and the
application services, organizations are no longer responsible for their maintenance.
3.6 Cloud Provider with Tra
ional IT Service Provider
Cloud providers and traditional IT service providers offer disti
inct approaches to delivering computing services,
each with its advantages and limitations, Here’
‘sa comparison between the two:
A. Cloud Provider
1, Scalability : Cloud providers offer scalability,
allowing users to quickly scale resources up or down based 0?
demand. This elasticity is beneficial for busing
lesses experiencing fluctuating workloads.
@ scanned with OKEN Scanner Cloud Computing and Web Services 3.45 Introduction to Cloud Computing
2. Pay-Per-Use Model :
loud services generally operate on a pay-as-you-go model, where users pay for the
resources they consume. This can be cost-effective as it avoids large upfront investments and allows for cost
optimization,
3. Global Reach : Cloud providers often have a global presence, with data centers distributed worldwide, This
enables users to access services from different geographical locations, improving performance and
redundancy.
4. Flexibility and Innovation : Cloud platforms frequently introduce new services and features, providing
users with access to the latest technological advancements. This allows for innovation and agility in
developing and deploying applications.
5.
Managed Services : Cloud providers often offer managed services, such as database management, security
services, and AI/ML tools, relieving users of certain operational burdens.
B. Traditional IT Service Provider
1, Control and Customization : Traditional IT service providers may offer greater control and customization
options, especially for on-premises solutions. This can be critical for businesses with specific compliance or
security requirements.
2, Legacy Systems Support : Some businesses rely on legacy systems that might not easily migrate to the
cloud. Traditional IT service providers can support and maintain these systems, ensuring their continued
operation.
3.
Predictable Costs : While cloud services offer scalability, traditional IT services might offer more
predictable costs, especially for long-term infrastructure investments, without the variability of pay-per-use
models.
Security and Compliance : In certain industries or scenarios, traditional IT service providers might offer a
perceived higher level of security and compliance adherence due to dedicated on-premises solutions.
‘Technical Expertise and Support : Traditional IT service providers often have specialized expertise in
specific areas and can provide hands-on support tailored to the organization's needs.
Both cloud providers and traditional IT service providers have their strengths, and the choice between the two
depends on various factors such as organizational goals, existing infrastructure, regulatory compliance, data
sensitivity, budget, and the nature of the workload. Many organizations use a combination of both to leverage the
advantages of each approach (hybrid IT) and achieve their business objectives.
3.7__ Open Challenges of Cloud Computing
Cloud computing is used for enabling global access to mutual pools of resources such as services, apps, data,
servers, and computer networks, It is done on either a third-party server located in a data center or a privately-
owned cloud. This makes data-accessing contrivances more reliable and efficient, with nominal administration
effort.
Because cloud technology depends on the alloc
similar toa utility,
nn of resources to attain consistency and economy of scale,
itis also fairly cost-effective, making it the choice for many small businesses and firms.
But there are also many challenges involved in cloud computing, here are six common challenges that every
organization must consider before implementing cloud computing technology.
@ scanned with OKEN Scanner to Cloud Computing
‘Security and
pracy
interoperability
ity and
lity
Portability
(( computing
performance
Fig. 3.7.1: Challenges of Cloud Computing
1. Security and Privacy
.d privacy of data are the main challenge in cloud comp!
data loss softwai
wuting. These challenges can reduce by
wre, Sensitive and personal information
not to be shared with third parties,
using security applications, encrypted file systems,
that is kept in the cloud should be defined as being for internal use only,
«have a plan to securely and efficiently manage the data they gather.
the more people you have
' Businesses mu
strious password supervision plays a vital role in cloud security. However,
sing your cloud account, the less secure it is. Anybody aware of your passwords will be able to access
the information you store there.
Businesses should employ multi-factor authentication and make sure that passwords are protected and
altered regularly, particularly when staff members leave. Access rights related to passwords and usernames
should only be allocated to those who require them.
2. Interoperability
+ The application on one platform should be able to incorporate services from the other platform. This is
known as interoperability
‘+ Its becoming possible through web services, but to develop such web services is complex.
3. Portability
‘+ The applications running on one cloud platform can be moved to new cloud platform and it should operate
correctly without making any changes in design coding, a:
‘+ The portability is not possible, because each of id providers uses differe1 lages for
le. ‘ach of the cl vides
uci he cloud providers uses different standard languages f
4. Service Quality
‘+ The Service-Level Agreements (SLAs) of the
providers are not enoug!
catabity Providers are not enough to guarantee the availability and
* The businesses disind
disinclined to switch to cloud without a strong service
5S. Computing Performance
* High network bandwidth is needed for data i
quality guarantee.
intensive applicat
sive applications on cioud, this result in high cost.
Tech Knowledge
@ scanned with OKEN Scanner Cloucl Computing and Web Services 3.17 Introduction to Cloud Computing
oes not meet the desired computing performance. Cloud computing
‘© In-cloud computing, low bandwidth
‘e company’s needs can be expensive
itself is affordable, but tuning the platform according to th
expense of transferring the data to public clouds can prove t0 be a problem for short-lived
Furth
and small-scale projects.
more, the
«Companies can save some money on system maintenance, management, and acquisitions. But they also have
th, and the absence of routine control in an infinitely scalable computing
to invest in additional band)
platform can increase costs.
Reliability and Availability
led by third-party hence it is mandatory for the
+ Most of the businesses are dependent on services pro
cloud systems to be reliable and robust.
srvice provider
«The capacity and capability of a technical service provider are as important a5 Price. The se
must be available when you need them.
«The main concern should be the service provider's sustainability and reputation Make sure you
comprehend the techniques via which a provider observes its services and defends dependability claims.
7. Downtime
«Downtime isa significant shortcoming of cloud technology. No seller can promise a platform that Is free of
possible downtime.
© Cloud technology makes small companies reliant on their connectivity, so companies with an untrustworthy
internet connection probably want to think twice before adopting cloud computing,
8. Vendor lock-
«Entering a cloud computing agreement is easier than leaving it. "Vendor lock-in” happens when altering
providers is either excessively expensive or just nat possible. It could be that the service is nonstandard or
that there is no viable vendor substitute.
«it comes down to buyer carefulness. Guarantee the services you involve are typical and transportable to
other providers, and above all, understand the requirements.
Cloud computing is a good solution for many businesses, but knowing what you are getting into is important
Having plans to address these six prominent challenges first will help ensure a successful experience.
3.8 Cloud Computing Software Security Fundamentals
Security is a principal concern when entrusting an organization's critical information to geographically dispersed
loud platforms not under the direct control of that organization. In addition to the conventional IT information
system security procedures, designing security into cloud software during the software development life cycle can
greatly reduce the cloud attack surface.
Cloud computing software security involves a set of fundamental practices andconsiderations aimed at
protecting data, applications, and infrastructure in a cloud environment. Here are some key fundamentals :
1. Eneryptio
tilize encryption techniques to safeguard sensitive data both in transit and at rest. Employ strong,
encryption algorithms to protect data from unauthorized access.
TechKnowledge
Puptications
@ scanned with OKEN Scanner i
3.18 Introduction to Cloud Computing
Services
1d Access Management (IAM) : Implement robust identity and a f .
Identity and Access Mana,
* thentication (MFA), role-based access control (RBAC), and least privilege principles ¢g
like multi-factor authentication . :
“ ces and prevent unauthorized access.
manage user access to resour ae
youl id Compliance : Ensure compliance with relevant data protection regu: ons 4 GDPR,
jan stead te ats reid ires to maintain data privacy an,
an) Uiesand he tn resteny rues a ipo ena a privacy an
ahd .e system behavior. Collect an
Security Monitoring and Logging : Employ monitoring tools to track and analyz. a alerts to respond a
analyze logs to identify potential security incidents and anomalies, Implement real-
security threats promptly
s es d
re Development Practices : Embrace secure coding practices
aaa Implement security testing, code reviews, and vulnerability assessments to
ig software development to mitigate
Vulnerabilities at the code le
‘identify and address security flaws, /
‘nt robust network security measures, such as firewalls, intrusion detection ang
work Security ; Imple
renee Security+ np networks (VPNs), to protect against unauthorized access anq
Prevention systems (IDPS),
and virtual private
attacks.
disaster recovery plan to ensure business continuity in
7. Disaster Recovery and Redundancy gna robu:
[aut of ¥stem fallures or eyberatacks. Utilize redundant systems and backups to minimize downtime ana data
loss,
configure them appropriately
3.9 _ Cloud Information Security
Information security objectives within a cloud SLubuting environment are established to ensure the protection,
confidentiality, integrity, availabilty, and privacy of data and resource, Here are key objectives:
1 Confidentiality : Protect sensitive data from unauthorized access oF disclosure. Employ encryption, access
Controls, and data classification to ensure that only authorized individuals or
ystems can access specific
information
J trustworth
2 Integrity : Guarantee the accuracy “sof data by preventing unauthorized alterations,
tampering, oF corruption. Implement data validat om checksums, and digital signatures. to maintain data
integrity.
4% Availability : Ensure that information and Services are accessible and available when heeded. Implement
redundancy, failover mechanisms and disaster Fecovery plans to minimize downtime a
Review Questions
nd service interruptions.
@.1 Discuss about cloug computing
Q.2 List and explain types of cloug
2.3 Explain private and public clouds
Q.4 Explain hybrid and community cloud.
‘ectane
@ scanned with OKEN Scanner Introduction to Clo
Cloud Computing and Web Services 3-19
as What is cloud reference model? List and explain three different models.
a.6 Explain laaS in detail.
Q.7 Explain PaaS in detail.
Explain Saas in detail.
Q.8
Qa.9 Define cloud computing. Explain essential characteristics of cloud computing.
Q.10 Explain open challenges of cloud computing.
© scanned with OKEN Scanner Cloud Computing Software
‘Lk Security Fundamentals
i ity, Integy
.ctives, Confidentiality, Integ
oud Computing Software Security fundamentals : Cloud Information Security Obje Se ee”
Cloud Computing Software Secur nciples,Seaite Cloud Software Regul
Availability, Cloud Security Services, Relevant Cloud Security Design Principles, Engineering, Cloud! Secutty Poy
Secure Development practices, Approaches to Cloud Software Requirement Engi z
nnplementation,
4.1 Cloud Information Security : Confidentiality
i ion is cruci ct sensitive data from
{i the context of cloud computing, ensuring confidentiality of information is crucial to prote
jes related to maintaining
horized access, disclosure, or theft. Here are some key aspects and strategies relate %
Confidentiality in cloud information security :
1, Data Enerypti
ploy strong encryption techniques to protect data both at rest (stored in dat
S28,
Soran) and in ansit (while being transmitted between users and cloud servers). Use robust encrypt
algorithms and proper key management practices to safeguard data,
Access Controls : Implement stringent access controls and authentication mechanisms to ensure that
authorized users have
‘access to sensitive information, Utilize strong authentication methods like multi-factor
tuthentication (MFA) to add an extra layer of security.
Role-Hased Access Control (RBAC) : Employ RBAC to define
and enforce access privileges based
and responsibilities. Limit access to sen:
ve data to only those users who require it for their job functions.
Data s
Bregation and Isolation : Utilize logical
and physical controls to segregate and isolate sensitiv
from other less critical d
‘ata. Employ virtual private clouds (VPCs) or secure compartments to separate dif
types of data,
% Goud Provider Security Measures : Choose cloud servie
© Providers (CSPs) that implement strong security
measun
"and compliance certifications. Ensure
for data protection,
ind offer features like enctyption, access controls,
follows security best practic
'sand provides necessary tools
(Secure Transmission Protocols : Use secure communication protocols
(eg, TLS/SSL) to ensure
tween users, applications,
and cloud servers, hereby preventing ea
communication channels bet
vesdroppin
data interception,
{neldent Response Plan ; Develop and regularly
test an incident re
Incidents or breaches th
“sponse plan to effectively respond to security
'at could compromise confidentiality.
Define procedures for containment, miti
Fecovery in case of a data breach,
@ scanned with OKEN Scanner ‘loud Computing and Web Services
4.2
42
Cloud Information Security : Integrity
t tn cloud computing, ensuring the integrity of data and information is crucial for maintaining trust, reliability, and.
| confidentiality. Integrity refers to the assurance that data remains accurate, consistent, and unchanged throughout its
lifecycle, Here are key aspects of ensuring integrity in cloud information security :
gnatures to verify the
1, Hash Functions and Digital Signatures : Use cryptographic ha
integrity of data, Hashing algorithms generate unique hashes for data, allowing verification of any alterations,
and origin validation.
th functions and digital s
Digital signatures provide authentication and non-repudiation, ensuring data integrit
2. Data Validation and Error Checking : Implement data validation mechanisms, such as checksums or cyclical
redundancy checks (CRC), to detect and mitigate data corruption or tampering, These mechanisms verify data
integrity by identifying discrepancies or alterations in data.
3. Logging and Monitoring : Maintain comprehensive logs and monitoring systems to track data access,
‘modifications, and system activities. Analyze logs regularly to detect any sus $ or unauthorized
changes to data.
4 Backup and Recovery Measures : Establish robust backup and recovery procedures to create redundant copies
of data. Regularly back up data and validate the integrity of hackups to ensure data can be restored accurately in
case of corruption or loss.
5. Compliance and Auditing : Adhere to regulatory compliance requirements and industry standards relevant to
data integrity. Regularly conduct audits and compliance checks to ensure adherenc
standards,
to security policies and
6. Vendor Security Assurance : For cloud service users, ensure that the cloud service provider (CSP) implements
adequate security measures and controls to maintain data integrity. Review
and compliance frameworks.
P security practices, certifications,
Employee Training and Awareness : Educate employees about security best practices, emphasizing the
importance of maintaining data integrity. Ensure they understand their role in preserving data accuracy and
report any suspicious activities.
4.3 Cloud Information Security : Availability
Availability in the context of cloud information securit
refers to the assurance that resources and services are
accessible and usable whenever needed by authorized users. I'S one of the Rindamental pillars of the CIA tiad
(Confidentiality, Integrity, and Availability) in information security. Ensuri
loud computing:
lability involve
several aspects in
1. Redundancy and Fault Tolerance : Cloud providers often implement radundancy across mul
and geographic regions. This redundancy ensures that if one data center or server ft
available through alternative resources. Fault-tolerant systems can continue op
components fal
le data centers
services and data remain
ing even when some
2. Service Level Agreements (SLAs) : Cloud service providers typically offer SLAs that speci the guaranteed
uptime and availability of services. These SLAS define the level of service relisbil
including compensation or penalties for dawnt
3. Load Batanci $ to distribute workloads eveniy across
‘multiple servers or resources. This helps prevent overloading of specific servers and ens
Utilization, contributing to availability
that users
expect,
a
# Cloud environments use load balancing mechanisn
res optimal resource
Fees
@ scanned with OKEN Scanner Goud Computing and Web Services 4-3 Cloud Computing Software Security F)
4. Backup and Disaster Recovery : Robust backup strategies and disaster recovery plans are essentia
components of ensuring availability. Regular backups of data and systems, along with procedu
continuous availability.
recovery in case of outages or disasters, help main
Distributed Denial of Service (DDoS) Protection : DDoS attacks aim to disrupt services by overwhe
servers or networks with excessive traffic. Cloud providers often have measures in place to mitigate theve
attacks and ensure service availability.
6. Scalability and Elasticity : Cloud environments offer scalability and elasticity, allowing users to scale res
up or down dynamically. This flexibility ensures that resources are available to meet changing de:
maintaining service availability.
7. Geographic Redundancy and Data Replication : Geographic redundancy and data replication across mult
regions or data centers ensure that data and services remain available even in the event of regional outages or
disasters.
44 _ Cloud Security Services
Cloud security services encompass a range of tools, technologies, and solutions designed to protect 2:
applications, and infrastructure hosted in cloud environments. These services aim to mitigate
compliance, and safeguard against various cyber threats. Some key cloud security services include
1. Data Encryption Services : These services ensure data security by encrypting data at rest and in trar
Encryption mechanisms safeguard sensitive information, preventing unauthorized access even if the dat
intercepted or breached.
2. Security Information and Event Management (SIEM) : SIEM tools collect, analyze, and correlate log data from
various sources to identify and respond to security threats an lents. They provide real-time monitoring and
incident response capabilities.
3. Vulnerability Assessment and Management : These services scan cloud environments to identif
vulnerabilities and weaknesses in systems and applications. They often include automated tools that assess th:
security posture and provide remediation recommendations.
4. Security Compliance and Governance : Services focused’on compliance ensure adherence to industry-specific
regulations (such as GDPR, HIPAA) and internal policies. They provide tools for auditing, reporting, and
enforcing compliance measures.
5. Threat Intelligence and Detection : Cloud-based threat intelligence services gather information about
emerging threats and attack patterns. These ser¥ices use Al and machine learning to detect and respond to
threats in real-time. .
6 Container Security : As containerized applications become more prevalent, services focusing on container
security offer solutions to secure container environments, ensuring the integrity and isolation of containerized
‘workloads.
7. Cloud Access Security Broker (CASB) : CASB solutions provide visibility and control over cloud services used
within an organization. They enforce security policies, monitor user activity, and secure data across multiple
cloud platforms.
@. Serveriess Security : With the rise of serverless computing, security services specifically designed for serveriess
architectures protect against unique threats and vulnerabilities in serverless environments.
@ scanned with OKEN Scanner cloud environme
I Involves adhering to spe
risks and safeguard sensitive dat a
principles and best practices
a. Here are some relevant cloud security design principles
mitigate
Privile .
'#e + Apply the principle of least privilege by granting users the minimal level of access required to
perform their tasks, This reduce
’ 7 Ks. This reduces the risk of unauthorized access and limits the potential damage caused by
compromised account
Defense in Depth
Implement multiple layers of security controls and defenses at various levels within the
cloud infrastructure, Th
eet ure. This strategy ensures that if one layer is breached, other security measures remain in place
( protect the system,
table Infrastructure
re unchangeable,
iploy immutable infrastructure practices where components and configurations
‘duces the risk of unauthorized modifications and enhances system reliability.
4, Continuous Monitoring and Logging : Implement. robust monitoring tools to detect and respond to security
threats In real-time, Collect and analyze logs to identify potential security incidents and anomalies, enabling
quick incident response.
Resilience and Redundancy
}esign cloud systems with redundancy and failover mechanisms to ensure high
ability and resilience. This helps mitigate the impact of hardware failures, outages, or disruptions.
6.
Automated Security Measures : Leverage automation to enforce security controls, perform regular security
seans, patch systems, and respond to security incidents promptly. Automated security measures help maintain a
consistent security posture.
7. Cloud Provider Security Controls : Understand and configure the security controls provided by the cloud
service provider (CSP) appropriately. Utilize built-in security features, such as identity and access management,
encryption, and network security tools,
8. Compliance and Governance + Align cloud security measures with industry standards, regulations, and
compliance requirements relevant to your organization. Implement governance frameworks and conduct regular
y "! a
audits to ensure adherence to security policies.
4.6 Secure Cloud Software Requirements
Securing, cloud software involves considering various requirements to ensure the protection of data,
applications, and infrastructure hosted in cloud environments. Here are some essential secure cloud software
requirements
1. Secure APIs and Interfaces : Ensure that APIs and interfaces used in cloud software are secure and properly
authenticated, Apply security best practices when designing and exposing APIs to prevent unauthorized access
or data breaches.
2. Secure Software Development Lifecycle (SDLC) : Incorporate security measures throughout the software
evelopment process, Follow secure coding practices, conduct regular security reviews, and perform
vulnerability assessments to mitigate security risks in the software.
Patch Management ; Maintain up-to-date software by regularly applying security patches and updates
vulnerabilities and protect against known security
Implement a robust patch management strategy to addres
~~ TechKaowledge
@ scanned with OKEN Scanner ON
rity Fundameny
software Sect! als
Cloud Computing and Web Services 4-5 Cloud Computing
lies with
fare compl
ee meet speci company
h relevant indus
‘+ Compliance and Regutatory Requirements « GineaRncconaaayaneneeeeT Oc
Standards, regulations, and data protection laws. implement controls and ™
requirements applicable to Your organization's industry. Jy by following best practig,
5. Secure Configuration Management : Configure cloud software eee unnecessary Services apy
“commended by the cloud service provider. Ensure that default settings are cha!
“lsabled, and security configurations ae appropriately set pponse plan to efficieny
: incident res} iy
6. Incident Response and Recovery Planning : Develop and regularly test an inciden ting, and recovering fron
: al
respond to security incidents, Define Procedures for detecting, containing, mitige
security breaches,
, audits, and penetration
7 Regular Security Assessments and Audits : Conduct periodic security assessments, lar assessments help i
lar ass
testing to identify and address vulnerabilities and weaknesses in the software. Regul
maintaining a strong security posture,
/ d_ administrators
8. User Training and Awareness : Provide comprehensive security training to users ant : to
ing sensitive information Securely,
Sdlucate them about security best practices, phishing prevention, and handling sensitive information securely,
4.7 __ Secure Development Practices
Secure development practices are essential methodologies and principles integrated into the software
development lifecycle (SDLC) to mitigate security tisks and vulnerabilities in software applications. These practices
aim to bulld secure, resilient, and reliable software. Here are key elements of secure development practices :
Secure Configuration Management : Configure software, servers, and applications securely by applying
Fecommended security settings and disabling unnecessary services or features that could Pose security risks,
2. Threat Modeling : Begin by identifying potential threats and vulnerabilities in the early stages of the software
‘evelopment process. Create threat models to understand potential attack vectors and risks associated with the
application.
3. Secure Coding Guidelines : Follow secure coding principles and Buidelines to write secure code. This includes
input validation, output encoding, proper error handling, avoiding insecure coding patterns,
and using secure
libraries and functions.
4. Regular Security Training : Educate developers about secure o
common vulnerabilities, Regular training helps developers stay i
how to address them,
‘oding practices, security best practices, and
informed about evolving security threats and
5. Code Reviews and Static Analysis : Conduct code reviews to identify security flaws,
errors. Use static analysis tools to analyze code for potential security i
6. Security Testing :
security assessments, t
future development cycles.
a © Scanned with OKEN Scanner Clon Computing and We Services
