![]() |
|
12.10.09 Addressing The Majority Of Concerns With Cloud Computing By Mike KavisEvery day I read numerous articles that are negative towards cloud computing . I can sum them up with the following bullets: • The cloud is insecure • Cloud computing is immature • Cloud is nothing new. We have been doing this for years. • Cloud computing is not really cheaper Most of the people who continue to doubt the value of the cloud have not actually rolled up their sleeves and proved any of their theories. I typically try to ignore this talk but I can usually only bite my tongue for so long. Then I post a long rant (like this one) and I am good for another month. So how about we hear from somebody who is actually building an entire company in the cloud opposed to hearing from IT purists with no hands-on experience with the cloud. So before I address each of the above mentioned claims, I ask that you suspend judgment and consider the following: The cloud is insecure Oh really! I would argue that a properly architected solution on Amazon would be far more secure than the majority of on-premise deployments today. First of all, here is what you get with Amazon AWS before you start adding your own processes and solutions: • Physical Security - Years of experience building large scale data center. Non-descript facilities, military grade perimeter berms, strict access controls, 3+ levels of two-factor authorization, and much more • EC2 (virtual server) Security - SSH logins, all access logged, AWS Admins can't login, customer generated key pairs, mandatory inbound firewall, signed API calls, customer instance isolation, and much more.
• Disk level security - Logically isolated virtual disk that is wiped clean after use, no access to raw devices, disk management to prevent disk access from other images, and much more. • Network level security - DDoS mitigation, IP spoofing prohibited at host OS level, port scanning neutralized (inbound ports blocked by default), packet sniffing protected at hypervisor level • Compliance - SAS-70, SOX, and customer examples of HIPAA ![]() Continue reading this article. About the Author: Mike Kavis is a veteran Chief Architect with over 23 years of IT experience including distributed computing, SOA, BPM, data warehouse, business intelligence, and enterprise architecture. Read Mike's blog at Enterprise Initiatives. |
|
|
|
|
-- SysAdminNews is an iEntry, Inc. publication -- iEntry, Inc. 2549 Richmond Rd. Lexington KY, 40509 2009 iEntry, Inc. All Rights Reserved Privacy Policy Legal archives | advertising info | news headlines | free newsletters | comments/feedback | submit article |