Privilege /Secrets maintenance is most crucial requirement in Identity and Access management services. The secrets/passwords are everywhere however in cloud environment these number are 4x times as compares to on premise solution with static secrets. The Secrets could be any form of digital credentials and sensitive information which could lead to breach!

What are Secrets?

A secret can be any sensitive information for e.g.

• User password
• Application and Database and other system-to-system passwords.
• auto-generated passwords /encryption keys
• Private encryption keys
• API Key and other application keys/credentials inside containers
• SSH Keys
• authorization tokens
• Private certificates for secure communication, transmitting and receiving of data (TLS, SSL etc.)
• One-time password devices

Why we need to manage Secrets?

The Secret management is imperative in today scenarios as this has been most affected sector and primary target for any Hackers. The emerging threat in digital environment and highly equipped hackers with self-learning abilities to classify, assess and exploit any vulnerability in the environment

Whether we are using secrets in different cloud services or within a particular cloud-based application, unorganized secrets management procedures can bring serious threat to entire security of platform for example: –

• Hard-coded and default credentials
• Managing passwords manually
• Sharing passwords
• Regular rotations
• Weak password and storing it in plain text files
• Hardcoded and embedded live scripts

Secrets Management Tools

In Cloud security it is imperative that primary focus should be on access control and circulation of dynamic secrets. There are various tools features provided by Cloud service provider and third-party vendors in Market for secret keys management however the most flexible and easy tool trending these days in the cloud industry is Hashicorp Vault. It comes with two products to provide cloud security services the Vault and boundary

Hashicorp is a software company with a Freemium Business Model. They provide various products to fully managed platform to automate infrastructure on any cloud.

The Hashicorp is based on open-source tools and marketable harvests that enable developers, operators, and security experts to secure, run, provision, and connect cloud-computing they basically provide infrastructure as code which is very flexible and mature. The products prevalent for cloud security are secrets management tool Hashicorp Vault and Boundary.

What is HashiCorp Vault?

HashiCorp Vault is a is a secrets management tool for securely accessing secrets. It is used to accomplish secrets keys management in distributed systems across cloud platforms. Vault empowers cloud security players to control access to tokens, passwords, encryption keys, and certificates to defend any potentially sensitive data. The contemporary “zero trust” model is used to harden inside the HashiCorp vault. The Vault can be easily integrated with applications to be explicitly authenticated, authorized to fetch secrets, rotating secrets and perform sensitive operations, along with catering audit requirements.

HashiCorp Vault solution is widely used across many industries including large financial organizations, hospitality, and everything in between to provide security in the cloud operating model.

Secrets Management tool HashiCorp Vault allows steady control access to encryption keys, passwords, certificates etc. for shielding technologies and applications. This delivers an extensive secrets management solution for enterprises looking for securing cloud environment

1– Vault helps protect data at rest and data in transit.

2– Vault exposes a high-level API for cryptography for developers to secure sensitive data without revealing encryption keys.

3- Vault also can act like a certificate authority, to provide dynamic short-lived certificates to secure communications with SSL/TLS.

4- Vault enables a brokering of identity between different platforms, such as AD on premises and AWS IAM to permit applications to work across platform borders. Vaults provide: –

• Storage Backends for Encrypted
• Isolated Namespaces
• Secure plugins
• Detailed Historical Audit logs
• Tenancy, rotating and revoking of secrets

1. Vault provides a master key and generates encryption keys to protect data. The master key is split into five parts. Any three of the five parts are required to reconstruct the master key.

HashiCorp Vault Architecture

The below architectural diagram of secrets management tool HashiCorp vault can explain the workflow of the vault process and services.

• Storage Backend
• Barrier
• Secrets Engine
• Audit Device
• Auth Method
• Client Token
• Token Store
• Root Tokens
• Rollback Manager
• Core
• Audit Broker
• Expiration Manager

Storage Backend – A storage backend is used for robust storage of encrypted data. The storage is placed at bottom of Architecture stack as it is non trusted components for the vault and chosen as per client requirement, the considered factors for the same are like High availability/Disaster recovery/Recovery time Objective. When the Vault is started the storage backend must be declared and configured well in advance.

HTTP API – The HTTP API is used to interact with clients, and it is also non-trusted component for the vault hence placed outside the Barrier

Barrier – The barrier is strong cryptographic components which creates an un-penetrable protection layer around the Vault. The barrier ensures data is validated and decrypted as it goes inside the Vault and all data gets encrypted as it goes out from the vault. The barrier by default stays in sealed state and must be unlocked before requesting any access operation to the vault.

The Unlocking of the vault is possible only using combination of Unseal Keys. When the vault is initialized it generate encryption keys. This key is in turn protected by Master key which gets divided into 5 parts and combination of any 3 keys of which are required to rebuild the master key. For protection purpose all data that flows between Vault and the storage backend passes through the barrier.

Image – Vault Architectures

Secrets Engine – Secrets engines are components which store, generate, or encrypt data. Secret Engine is like virtual file system supporting operations like read, write, delete, generate dynamic credentials, encryptions etc. In Vault when a secrets engine is enabled, a random UUID is generated. This becomes the data root for that engine. As Secret engine writes to the physical storage layer, it is prefixed with that UUID folder as relative access is not supported by the vault hence the secrets engine cannot access other data.

Audit Device – are leveraged to keep comprehensive record of logs for all requests and response inside the vault. As all the operations executed inside the vault are API request and response, thus audit log contains all authenticated communication with Vault, as well all generated errors.

Auth Method – Authentication is used to validate access to vault. The auth method are responsible for conveying identity and a set of policies to a user. Vaults validate a user and returns a client token that can be used for future requests.

Client Token /Vault token– Tokens are the method for authentication within Vault. Token can be generated leveraging authentication methods they can also be used dynamically to generate tokens based on external identities. Inside the Vault tokens record to information like Access control list policies. These policies control directs what access are allowed to the user inside the Vault these tokens also carried meta data which is used for Audit logs such as creation time, last renewal time etc.

Token Store – Are token authentication backend that it is responsible for creating and storing tokens, the token store has no login capability and all actions require existing authenticated tokens.

Root Tokens – are tokens that have the root policy committed to them.

Rollback Manager – This is internal component of Vault to control partial failure cases by using write ahead logging.

Core – The core is used to manage the flow of requests through the system, it enforces Access control Lists and ensure audit logging is done.

Audit Broker – is leveraged to distribute the request out to all the configured audit devices.

Expiration Manager – is used to automatically revokes the secret on Lease expire if allowed by the client

HashiCorp Vaults Pricing

Let’s discuss about Hashicorp vaults pricing. There are 3 options to use this tool from pricing stand point.

1. Open Source
2. Cloud – Managed Vault
3. Enterprise Vault Premium editions.

The Vault Open-source freeware version has limitation of ~50 users only and to leverage all features and functionality it is highly recommended to use Cloud or Enterprise version. You can visit attached link for all Vault Pricing Options.

Conclusion

In this Article we have covered What are Secrets? Why we need Secrets Management? and Secrets Management tool offered by Hashicorp Vault. There are several other tools available for secrets management in the market as mentioned below. As per the client requirement and existing infrastructure we can propose appropriate tools to our clients as long it serves the purpose of underline security with future integration possibilities

• Conjur Secrets Manager (Open Source) – CyberArk
• Dynamic Access Provider (DAP) Enterprise – CyberArk
• AWS Secrets Manager – Rotate, manage, and retrieve database credentials, API keys, and other secrets through their lifecycle
• Azure Key Vault – securely storing and accessing secrets
• Akeyless Vault for Secrets Management and Secure Remote Access
• Docker secrets management

The Security trend seen in last 5 years has shown paradigm shift towards Identify and Access management domain. IAM plays vital role in preventing Cyberattacks due to leak credentials and hence many organizations are moving towards taking proactive steps by adding more secrets tools and technology to protect their sensitive information. As these organization moves towards more flexible, scalable, secure and cloud agnostic environment.

The Hashicorp suits of products are outstanding in terms of ease of use, integration, and configurations. The can flawlessly assimilates with all offerings of major cloud vendors. The Hashicorp products carry solution to full scale infrastructure security management.

For the next topics we will cover about other HashiCorp product in security and its comparison to Other traditional Privilege Access Management tools in the market. Stay tuned for upcoming topics on Boundary and CyberArk PAM solution offerings.

Related Articles:

• Understanding Cloud Security & Data Protection
• Cloud Security – How to Secure Cloud Environment?
• Top 5 Cloud Service Provider Accreditations and Third-Party Auditor Reports

The post Cloud Secrets Management Tool – HashiCorp Vault appeared first on Techyaz.com.

AWS Data Center Locations

The AWS Cloud Data Center locations are spread across the globe with 22 Regions and 69 AZ (Availability Zones), AWS has broadcast plans for 9 new Availability Zones and 3 additional Regions in Cape Town, Jakarta, and Milan.

Image :AWS Data center Location Map

AWS Regions

North America

1. US East Region (Northern Virginia)
   EC2 Availability Zones: 6
   Launched 2006
2. US East Region (Ohio)
   EC2 Availability Zones: 3
   Launched 2016
3. US West Region (Oregon)
   EC2 Availability Zones: 4
   Launched 2011
4. US West (Northern California)
   EC2 Availability Zones: 3*
   Launched 2009
5. GovCloud (US-West)
   EC2 Availability Zones: 3
   Launched 2011
6. GovCloud (US-East)
   EC2 Availability Zones: 3
   Launched 2018
7. Canada (Central) Region**
   EC2 Availability Zones: 2
   Launched 2016

South America

1. South America Region (São Paulo)
   EC2 Availability Zones: 3*
   Launched 2011

Europe /Middle east/Africa

1. Europe Region (London)
   EC2 Availability Zones: 3
2. Europe Region (Stockholm)
   EC2 Availability Zones: 3
3. Europe Region (Frankfurt)
   EC2 Availability Zones: 3
4. Europe Region (Paris)
   EC2 Availability Zones: 3
   Middle East Region(Bahrain)
   EC2 Availability Zones: 3

Asia Pacific

1. Mainland China Region (Beijing)
   EC2 Availability Zones: 2
2. Asia Pacific Region (Sydney)
   EC2 Availability Zones: 3
   Launched 2012
3. Asia Pacific Region (Tokyo)
   EC2 Availability Zones: 4*
   Launched 2011
4. Asia Pacific Region (Seoul)
   EC2 Availability Zones: 3
   Launched 2016
5. Mainland China Region (Ningxia)
   EC2 Availability Zones: 3
6. Asia Pacific Local Region¹(Osaka)
   EC2 Availability Zones: 1
   Launched 2018
7. Asia Pacific Region (Mumbai)
   EC2 Availability Zones: 3
   Launched 2016
8. Asia Pacific Region (Hong Kong)
   EC2 Availability Zones: 3
   Launched 2019

Microsoft Azure Data Center Locations

Cloud data center locations of Microsoft Azure has further extended its reach by having maximum global regions than any other cloud provider in the world. The Azure Data center conserving data placement and contribution inclusive compliance and resiliency options for their client.

They have covered 54 regions across the globe

With 140 available Zones in 140 countries

Image :Azure DC Location Map

Azure Regions

UNITED STATES

Europe

ASIA PACIFIC Region

Middle East and Africa

GOVERNMENT

Google Cloud Data Center Locations – GCP

The Google Cloud data center locations is spread across 61 Availability Zones with 134 Edge Location (Network) across 20 Regions. The Google cloud Data centers are available in 200 countries

Announced Google DC – Google Cloud is expanding its reach into new regions: Seoul (South Korea), Salt Lake City (USA), Las Vegas (USA) and Jakarta (Indonesia).

Image : Google Data Center Location Map

GCP Data Center Regions

AMERICAS

1. OREGON (us-west1)
2. LOS ANGELES (us-west2)
3. IOWA (us-central1)
4. SOUTH CAROLINA (us-east1)
5. N. VIRGINIA (us-east4)
6. MONTRÉAL (northamerica-northeast1)
7. SÃO PAULO (southamerica-east1)

EUROPE

1. LONDON (europe-west2)
2. BELGIUM (europe-west1)
3. NETHERLANDS (europe-west4)
4. ZURICH (europe-west6)
5. FRANKFURT (europe-west3)
6. FINLAND (europe-north1)

ASIA PACIFIC

1. MUMBAI (asia-south1)
2. SINGAPORE (asia-southeast1)
3. HONG KONG (asia-east2)
4. TAIWAN (asia-east1)
5. TOKYO (asia-northeast1)
6. OSAKA (asia-northeast2)
7. SYDNEY (australia-southeast1)

Reference

• AWS – https://aws.amazon.com/about-aws/global-infrastructure/
• Google – https://cloud.google.com/about/locations/?region=asia-pacific#region
• Azure – https://azure.microsoft.com/en-in/global-infrastructure/regions/

Read More:

• Cloud Security – How to Secure Cloud Environment?
• Understanding Cloud Security & Data Protection
•  How to Learn Cloud Computing?

I hope you like this article. Please follow our Facebook page and Twitter handle to get latest updates.

The post Cloud Data Center Locations for Top 3 CSPs (AWS, Azure & Google) appeared first on Techyaz.com.

Cloud Computing brings best in breed technologies mesh to provide high availability, durability and capacity with minimum time frame. In simple words your traditional data center (DC) would have flew down from on-premise to somewhere with big giants Cloud Service Providers DC like GCP (Google Cloud Platform), AWS (Amazon Web Services), Azure, IBM, Salesforce etc.

Why Should You Learn Cloud Computing?

As i mentioned above, Cloud Computing is growing faster than ever and creating lot of high paying jobs. The reason behind its popularity is its Pay As You Use model.

All cloud services are running on “Pay As You Use” model. You only pay for the services till you are using and can increase/decrease the usage capacity in few hours only. The Cloud Computing takes away hassle of procurement of servers, software’s & resources. It also removes the need of building, managing & maintenance of Data centres that is why most of the organizations are adopting cloud computing these days.

As more organizations will move to cloud, more cloud related jobs or opportunities will arise. So, it is imperative to learn cloud computing technology so that you can make use of it in your IT career. The added advantage of learning cloud is that you can bring value to your organization and its clients.

Prerequisites to Learn Cloud Computing

Today I will brief you about the skills needed to learn cloud and build promising career in it. Cloud can add value to your CV/Resume. Every IT professional need to have some familiarity with cloud. It has become an essential part of Information Technology. We as Digital Users are leveraging cloud Technology every day in our life. The most common example is social media, mails, music, YouTube, Facebook, Instagram, Twitter, News etc. Everything where data is stored in huge size is using cloud technology in the background.

Cloud Computing services falls into three categories:

• Infrastructure as a Service (IaaS),
• Platform as a Service (PaaS)
• Software as a Service (SaaS).

Although this article is very much applicable to all three categories for learning standpoint but primarily we will talk and refer about IaaS (Infrastructure as a Service) model. Infrastructure as a service (IaaS) is a form of cloud computing that provides virtualized compute resources over the internet following pay per use model.

As in earlier days Data center had multiple roles and responsibilities, similarly in cloud you can get similar technology, roles and career. If you belongs to IT Infrastructure services, then you  can pursue your career in IaaS cloud computing.

One can learn cloud as a beginner even if you have very basic skills in computers, prior experience in IT is an added advantage.

To begin with cloud there are three-important area to cover:

• Virtualization concepts
• Networking in virtual environment
• Operating systems (Linux & Windows)

Virtualization

It is important to understand how virtualized environment operates. In cloud context, virtual machines lie over and above hypervisor layer. Multiple VM’s shared same physical hardware and all the network equipment but are isolated or virtually separated from the other client machines using hypervisor technology. Virtualization means every type of application or workload which needed physical machines in past now can run by using shared resources across many clients. For more information refer to

Networking

The most important aspect of cloud is to understand cloud networking. It is very difficult section in cloud, and even those with some robust skills, typically require time to fully understand it.

Operating System (Linux & Windows)

Hands on experience on Linux and Windows is with excellent command lines skills is must before begin journey in cloud computing. One must begin with above three concepts to enter cloud computing.

How to Start Learning Cloud Computing?

The very first thing you need to do is, you need to decide the cloud service provider for which you want to learn and pursue distinct roles. There are many Cloud service providers in the market. You can choose any of them but it’s always wise to choose from top 3 service providers. Currently, Amazon is top cloud service provider in the market followed by Microsoft. Below are the names of some popular cloud service providers.

1. Amazon Web Services (AWS)
2. Microsoft Azure
3. IBM Cloud
4. Google Cloud Platform (GCP)
5. Salesforce

Once you have chosen the right cloud service provider then you should focus on the distinct domains. For example, if you had prior experience in networks you can choose to become Cloud Network Architect role and start focusing on CSP network services. If you are a system administrator then you can pursue Cloud System Administrator role. Below is the list of some cloud computing roles.

You can choose any roles given below as per your choice and are of interest. It would be an added advantage if you choose a domain in which you have some knowledge. The Distinct Technical roles which you can pursue in cloud are given below.

• Cloud Operations Engineer
• Cloud System Administrator
• Cloud Solution Architect
• Cloud Technical Architect
• Cloud Network Architect
• Cloud Security Architect
• Cloud Sales Consultant

I have explained the responsibilities and job profile of each and every role in below points.

• Cloud Operation Engineer – You should have at least 3 years of experience in this role. You need to ensure management of daily operations like adding Virtual machine (VM) to the cloud stack, installing software’s on the VM’s, monitoring cloud usage, controlling access to cloud environment, Identify and Access management for cloud.

• Cloud System Administrator – This job profile is similar to the system administrator job in legacy environment. Here, you need to take care of your cloud deployments and administration.  In cloud context security is shared responsibility however the systems security is client accountability. This role is mainly focus on hardening the Operating system and maintaining it. This will cover antivirus installation, policy control and overall protection services offered by cloud service provider. Strong Linux command line skills are needed.

• Cloud Solution Architect – You should have more than 6 years of experience to pursue a cloud solution architect role. The Cloud Solution Architect roles means to understand client requirement and propose possible design for the cloud IaaS. This comprise of servers, Data storage strategy, location, region, monitoring, security, Disaster Recovery and Business Continuity solution. Cloud SA may need to design a Hosting solution for some website or Data analytics, Data warehousing, Graphics processing solution. The responsibility of cloud SA is to understand all services provided by the Cloud Service Provider (CSP) so that he can design a suitable solution considering all services and their relative cost.

• Cloud Technical Architect – You should be on senior role or at least 7 years of experience to work as cloud Technical Architect. The Technical Architect role is to create the proposed design by the cloud Solution Architect. The responsibility of the Architect is to manage all technical queries in creating the entire cloud stack. Expert in shell, Perl, python compiled code language will be an added advantage. You must have expert level knowledge of Linux and windows operating system. This role demands knowledge of all fields including Networks, Infrastructure, Servers and settings, Identify and Access management. The Architect need to fix any issue which comes under configuring access, or security settings, Roles distribution etc. The hands-on experience on all services provided by CSP is mandatory for this role.

• Cloud Network Architect– The Network Architect need to configure Virtual Private Network(VPC), load balancing in cloud, manage ports, Incoming and outgoing connections, Tunnelling, Internet to cloud connection etc. Deep understanding of TCP/IP, Subnetting, DNS, DHCP, NAT and routing, strong knowledge of layer 2 network protocols, Good knowledge of IP routing, scripting abilities Perl or Shell. CCNA or CCNP preferred certification. The Network Architect need to design, create and maintain any network related issues.

• Cloud Security Architect –The role is most crucial and important in cloud environment considering the fact you can access cloud from anywhere anytime and its security need to be designed by Cloud Security Architect. The data security at rest and in transit, encryptions and descriptions, to avoid data loss and exposure. Good understanding of Internet and hosting from network layer up through the application layer, monitoring tools, clustering and internet security. The cloud security policies, governance, risk assessment, Multi-factor authentication and Authorization. Read attached article if you want to understand the basics of Cloud Security and Data Protection.

• Cloud Sales Consultant – Must be a business administration preferable MBA, Client facing roles, excellent communication skills, building strategic partnership at the C-level. Google knowledge of market leader in cloud in terms of services and costing. Love travel jobs.

Study Materials

There are lot of study materials available on internet to start with. Many portals have free courses that you can register to learn cloud computing. You can also buy a cloud related course on Udemy or Coursera. I have given specific training courses for each cloud providers in below links. You can access as per your choice to learn different cloud courses like AWS, Azure, GCP etc. You can also get practice papers as well if you are preparing for AWS or Azure certifications.

Online Training Courses for Top Cloud Service Providers:

• AWS Certified Solution Architect – Online Training Courses
• Architecting with Google Cloud Platform
• Architecting Microsoft Azure Solutions
• Hands on Google Cloud Platform (GCP) – Cloud Architect

I hope you like this article. Please Like, Comment, Share & Subscribe to this website to get latest articles directly into your inbox. You can also follow our Facebook page and Twitter handle to get latest updates.

Read More:

• Is Presales a Good Career Opportunity in IT Industry?
• Top 5 Cloud Service Provider Accreditations and Third Party Auditor Reports
• Understanding Cloud Computing
• Understanding Cloud Security and Data Protection

The post How to Learn Cloud Computing? appeared first on Techyaz.com.

Here I am going to answer all these questions and explaining about Cloud Security in this context.

Is your data secure in Cloud environment?

Yes, your data will be secured in cloud environment if you can design security solution/configurations leveraging public cloud providers features and third-party tools efficiently.

The amount of security configuration work you must do will varies, depending on what kind of cloud services you select and how sensitive your data is.

Security in Cloud creates a shared responsibility model between the customer and Cloud Service Provider (CSP). CSPs are responsible for securing the infrastructure (hardware, software, networks, and facilities of their Data center) that supports the cloud and you will be responsible for anything you put on the cloud or connect to the cloud (Data, Operating System, softwares, tools, License, Access, Credentials, authentication, encryption etc.)

Is your data in Cloud Hackable?

No, cloud systems are not hackable in terms of technology, hardware and network services provided by cloud provider. However, if security configurations are not done accurately by the user then loopholes in security may lead vulnerability in your cloud environment.

Can your data be disclosed by the Cloud Service Provider?

Your content/data will not be disclosed unless service provider required to do so to comply with the law of the country or a valid and binding order of a governmental or regulatory body. Unless prohibited from doing so or there is clear indication of illegal conduct about the use of CSP’s products or services. CSP notifies customers before disclosing customer content so they can seek protection from disclosure.

To understand all above and similar security related concerns you should first understand Cloud Security. Let’s discuss what is cloud security and how many domains we need to take care from cloud security point of view.

What is Cloud Security?

As every second your information/data travel through cloud and from different locations, networks and regions. We need to ensure it is not leaked in process of transmission from one place to other. Typically, all firms are well verse about physical and technical security of their On-premise data center. Similarly, cloud services and Infrastructure need to be secured to protect the confidentiality, integrity, and availability of your or your client data.

In Cloud context, security is a shared responsibility between the Cloud Service Provider (CSP) and its users/customers. CSPs take care of physical and logical security of its underlying hardware until Hypervisor layer. However, anything above Operating System is Client responsibility because customer owns the data and service provider has no access to it. Although it also varies in each model of Cloud Computing for some services.

Cloud Security is all about leveraging security features and tools to design and build a secure cloud environment to protect the privacy and integrity of cloud customers and their data. Cloud Security is blend of technologies and policies designed to adhere and regulate compliance rules and protect information, data applications and infrastructure associated with Cloud Computing use.

Cloud Security Categories

From cloud security perspective, below are the cloud security domains or categories that needs to be considered while building cloud environment.

1. Physical Security
2. Network security
3. System Security
4. Application Security
5. Data Security
6. Identity and Access management
7. Encryptions
8. Security operations

Each ownership for each type of security in cloud varies in each model of Cloud. You can see who is responsible for  what in each cloud model in below image.

1. Physical Security- is the protection of hardware, software, networks and data from physical actions and events that could cause serious loss or damage to an enterprise, agency or institution. CSPs are responsible to take care of this security.
2. Network Security – Includes data security in transit to and from the public cloud provider. It means designing and building network configuration and its elements allowing a secure access to cloud resources from your on-premise Data centers, Office, Internet etc. This security is shared responsibility between CSPs & Customer.
3. System Security- This capability covers operating system hardening, protection and policy control. The host security at PaaS and SaaS Level are transferred to CSP.
4. Application Security – It’s a shared responsibility in cloud context to protect the application running over the cloud. Based on type of cloud model application security is managed, for e.g in SaaS cloud provider will manage the security of the application. While at the PaaS level platform security will be managed by CSP and deployed application will be customer responsibility.
5. Data Security – Data security capability includes securing data in transit and at rest it to avoid data loss and exposure.
6. Identity and Access management- This capability evolves around authentication, verification and authorization of cloud resources.
7. Encryptions – As all communications between regions is across public Internet infrastructure; therefore, appropriate encryption methods should be used to protect sensitive data.
8. Security operations- Governance and strategic direction on security policies, risk assessment and its maintenance.

Choose Cloud Service Provider considering Data Security, Information Security and Quality Assurance?

Its depends on data and its criticality in terms of sensitivity, availability & durability requirement. For choosing most reliable cloud service provider we must consider CSP’s accreditations, security certifications and third party audit assessment reports. All major cloud service provider share their policies accreditation on data privacy, security, durability, availability information on their respective portals under valid Non-disclosure agreement. These certifications are global and can be achieved through periodic rigorous external audit accredited certification bodies based on NIST (National Industrial Security Program Operating Manual) global standards.

Some of the Most popular Cloud Service Provider Accreditations and Certification for cloud computing compliance and security are given in attached article. Read it to understand Cloud Accreditations and Certification that will finally help you to choose right Cloud Service Provider.

I hope you like this article. Please follow us on our facebook page and on Twitter handle to get latest updates.

Reference Links: Azure , AWS  ,Google ,IBM

The post Understanding Cloud Security & Data Protection appeared first on Techyaz.com.

Compliance Program provided by Cloud Services Providers

Cloud Service providers ensure robust controls to secure their infrastructure, to protect client data. As virtual systems build over the cloud Infrastructure need also to be secured and it comes with shared responsibility and compliance. Cloud Data center environment comes with audit friendly features and standards to ensure client satisfaction about their data security. The IT infrastructure that CSP provides to its customers is designed and managed in orientation with security best practices and a variety of IT security standards due to economies of scale, including but not limited to the following:

AWS (Amazon) Security Certifications /Accreditation 

• Cloud Computing Compliance Controls Catalogue (C5)
• FedRAMP Partner Package
• Global Financial Services Regulatory Principles IRAP Package
• ISO 27001:2013 Certification and Statement of Applicability (SoA)
• ISO 27017:2015 Certification and Statement of Applicability (SoA)
• ISO 27018:2014 Certification and Statement of Applicability (SoA)
• ISO 9001:2015 Certification
• MAS TRM Guidelines Workbook
• PCI DSS Attestation of Compliance (AOC) and Responsibility Summary
• PSN Connection Compliance Certificate (CoCo)
• PSN Service Provision Compliance Certificate
• Quality Management System Overview
• Service Organization Controls (SOC) 1 Report
• Service Organization Controls (SOC) 2 Report
• Service Organization Controls (SOC) 3 Report
• SOC Continued Operations

 Microsoft Azure Security and Compliance Certifications / Accreditation 

• ISO 27001, FedRAMP, SOC 1 and SOC 2.
• The Content Delivery and Security Association (CDSA)
• Criminal Justice Information Services (CJIS)
• The Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM) CSACCM
• EU Model Clause
• FDA 21 CFR Part 11(The US Food and Drug Administration (FDA) Code of Federal
• Regulations (CFR) Title 21 Part 11)
• FedRAMP(Federal Risk and Authorization Management Program (FedRAMP)
• The Family Educational Rights and Privacy Act (FERPA)
• FIPS 140-2. Federal Information Processing Standard (FIPS) Publication 140-2
• The Health Insurance Portability and Accountability Act (HIPAA)
• IRAP (Australian Government Information Security Registered Assessors Program)
• ISO/IEC 27001/27002:2013
• Multi-Level Protection Scheme (MLPS) is based on the Chinese state standard issued by the Ministry of Public Security
• Multi-Tier Cloud Security Standard for Singapore (MTCS SS),
• Payment Card Industry (PCI) Data Security Standards (DSS) version 3.0
• TCS CCCPPF Trusted Cloud Service certification developed by the China Cloud Computing Promotion and Policy Forum (CCCPPF)
• UK G-Cloud. 

Google Security and Compliance Certifications / Accreditation

• SSAE16 / ISAE 3402 Type II:
• SOC 1
• SOC 2
• SOC 3 public audit report
• ISO 27017, Cloud Security
• ISO 27018, Cloud Privacy
• FedRAMP ATO for Google App Engine
• PCI DSS v3.2
• HIPAA
• CSA STAR
• MTCS Tier 3 Certification (Singapore)
• Google Cloud Platform and the EU Data Protection Directive 

IBM Security and Compliance Certifications / Accreditation

• FedRAMP
• FISMA
• FFIEC
• SOC Reports
• ISO 27001
• ISO 27017
• ISO 27018
• Cloud Security Alliance
• PCI Compliance
• HIPAA
• HITRUST Assessment
• GSMA (DAL09, PAR01)
• CJIS Standards
• EU Model Clauses
• Privacy Shield
• IBM ISO Management System Certifications

Related Read:

• What is Cloud Computing?
• Understanding Cloud Security & Data Protection in Cloud

I hope you like this article. Please follow our Facebook page and Twitter handle to get latest updates.

Reference Links: Azure , AWS  ,Google ,IBM

The post Top 5 Cloud Service Provider Accreditations and Third-Party Auditor Reports appeared first on Techyaz.com.

Cloud Computing

Cloud Computing atmosphere is all about getting compute for e.g. (Storage, Software, Platform, CPU, RAM, Processor, network, Cluster etc.) using Internet anywhere, anytime and in any size. Cloud provides unlimited compute services with pay as per use model. Cloud bring best in breed technologies mesh to provide high availability, high durability and high capacity with minimum time frame, in simple words your traditional data center (DC) would have flew down from on-premise to somewhere with big giants Cloud Service Providers DC like Google, AWS, Azure etc.

Benefits of Cloud Computing

There are many benefits of Cloud Computing. It is a big shift from the traditional way businesses think about IT resources.

1. Time -Most cloud computing services are provided on demand, so even vast amounts of computing resources can be provisioned in minutes, certainly with just a few mouse clicks, giving businesses a lot of flexibility and taking the pressure off capacity planning
2. Cost – Cloud Computing removes the investment expense of procurement of hardware and software and setting up and running onsite datacenters—the racks of servers, 24/7 electricity for power and cooling, the IT experts for managing the infrastructure, Hardware maintenance, Physical security etc.
3. Scalability -The benefits of cloud computing services include the ability to scale elastically. In cloud speak, that means delivering the right amount of IT resources—for example, computing power, storage, bandwidth—right when it’s needed and from the right geographic location.
4. Productivity-On-site data centers typically requires high maintenance, technology upgrade and heavy investment as it need lot of “racking and stacking”—hardware setup, software patching and other time-consuming IT management tasks. Cloud removes the need for many of these tasks, so IT teams can spend time on achieving business goals. Moving to the cloud gives access to enterprise-class technology, for everyone anywhere anytime.
5. High Performance-The biggest cloud computing services run on a worldwide network of secure datacenters, which are regularly upgraded to the latest generation of fast and efficient computing hardware. This offers several benefits over a single corporate datacenter, including reduced network latency for applications and greater economies of scale. You can increase any amount of storage and processing capacity with pay per use model.
6. High Reliability– Cloud computing makes data backup, disaster recovery and business continuity easier and less expensive, because data can be replicated at multiple redundant locations on the cloud provider’s network.
7. Security – Cloud computing gives you greater security when your hardware like laptop, mobile, tablet etc. are lost, damage or stolen this occurs as your data is stored in the cloud, you can access it no matter what happens to your machine. And you can even remotely wipe data from lost devices so it doesn’t get into the wrong hands. Cloud Ensures minimum disruption to Business.
8. Disaster Recovery – Cloud provides best DR solution for any businesses, cloud-based backup and recovery solutions save time, reduce large upfront investment due to global presence and economies of scale. Cloud service provider features like tiered storage, multiple Availability zones, Data replication etc. can be leveraged to design optimum DR and BCP solutions.

Types of Cloud Offerings

Cloud Computing services majorly  falls into three categories:

• Infrastructure as a Service (IaaS),
• Platform as a Service (PaaS)
• Software as a Service (SaaS).

IaaS – Infrastructure as a Service

Infrastructure as a service (IaaS) is a form of cloud computing that provides virtualized computing resources over the internet following pay per use model . Or we can say traditional on-prem data center services on rent for e.g. IT infrastructure—servers and virtual machines (VMs), storage, networks, operating systems.

Platform as a Service (PaaS)

Platform-as-a-service (PaaS) represents cloud services that provide platform or environment for developing, run, manage testing, delivering and managing applications on-demand online anytime. PaaS ensure ready to use development & testing platform without the complexity of building and maintaining the infrastructure. PaaS is designed to make developers and clients life easy by leveraging pre-configured systems, templates, software’s ready to build mobile or web applications  and with no hassle of setting up or managing the underlying infrastructure of servers, storage, network and databases needed for development.

Software as a Service (SaaS)

Software-as-a-service (SaaS) is a process for delivering software applications over the Internet, on demand and typically on a subscription basis. With SaaS, cloud providers host and manage the software application and underlying infrastructure and handle any maintenance, like software upgrades and security patching. Users connect to the application over the Internet, usually with a web browser on their phone, tablet or PC. To see more on SaaS, refer to Azure

Top Cloud Service Providers

As per Forbes below are the list of top 10 Cloud service providers

1. Microsoft Azure
2. AWS
3. Salesforce
4. SAP
5. IBM
6. Google
7. Oracle
8. Workday
9. Service Now
10. VMware

I hope you like this article. Please follow us on our facebook page and on Twitter handle to get latest updates.

The post What is Cloud Computing? appeared first on Techyaz.com.