Star InactiveStar InactiveStar InactiveStar InactiveStar Inactive
 

When companies move to the cloud, it’s paramount that they know where the provider’s security role ends and where the customer’s begins. The shared-responsibility model is one of the fundamental underpinnings of a successful public cloud deployment. It requires vigilance by the cloud provider and customer—but in different ways. Amazon Web Services (AWS), which developed the philosophy...

The post Awareness of shared-responsibility model is critical to cloud success appeared first on The Troposphere.


When companies move to the cloud, it’s paramount that they know where the provider’s security role ends and where the customer’s begins.

The shared-responsibility model is one of the fundamental underpinnings of a successful public cloud deployment. It requires vigilance by the cloud provider and customer—but in different ways. Amazon Web Services (AWS), which developed the philosophy as it ushered in public cloud, describes it succinctly as knowing the difference between security in the cloud versus the security of the cloud.

And that model, which can be radically different from how organizations are used to securing their own data centers, often creates a disconnect for newer cloud customers.

“Many organizations are not asking the right question,” said Ananda Rajagopal, vice president of products at Gigamon, a network-monitoring company based in Santa Clara, Calif. “The right question is not, ‘Is the cloud secure?’ It’s, ‘Is the cloud being used securely?'”

And that’s a change from how enterprises are used to operating behind the firewall, said Abhi Dugar, research director at IDC. The security of the cloud refers to all the underlying hardware and software:

  • compute, storage and networking
  • AWS global infrastructure

That leaves everything else—including the configuration of those foundational services—in the hands of the customer:

  • customer data
  • apps and identify and access management
  • operating system patches
  • network and firewall configuration
  • data and network encryption

Public cloud vendors and third-party vendors offer services to assist in these areas, but it’s ultimately up to the customers to set policies and track things.

The result is a balancing act, said Jason Cradit, senior director of technology at TRC Companies, an engineering and consulting firm for the oil and gas industry. TRC, which uses AWS as its primary public cloud provider, turns to companies like Sumo Logic and Trend Micro to help segregate duties and fill the gaps. And it also does its part to ensure it and its partners are operating securely.

“Even though it’s a shared responsibility, I still feel like with all my workloads I have to be aware and checking [that they] do their part, which I’m sure they are,” Cradit said. “If we’re going to put our critical infrastructure out there, we have to live up to standards on our side as much as we can.”

Trevor Jones is a news writer with SearchCloudComputing and SearchAWS. Contact him at This email address is being protected from spambots. You need JavaScript enabled to view it..

The post Awareness of shared-responsibility model is critical to cloud success appeared first on The Troposphere.


Read full article on Cloud Computing from IT knowledge exchange


Powered by Preisvergleich


My Tweets

Last Articles

What is open source?

Have you ever wondered just what is open source? Jack Wallen explains the concept, why it's...

How to use Hangouts Chat

If you use G Suite, you can also use Hangouts Chat for conversations within your organization....

Windows 10 October 2018 Update broken your network drives? Here's a possible fix

Despite being the rollout of the major feature update being halted for a month, bugs in the new...

Raspberry Pi 3 Model A+ review: A $25 computer with a lot of promise

Get the lowdown on how well the latest Raspberry Pi board performs.

How to make LibreOffice Writer remember your last cursor position

Jack Wallen shows you how to configure LibreOffice so that it opens documents right where you last...

How to download your data stored by Apple

Downloading a copy of your data that Apple stores in iCloud and other services is easier than...

Microsoft finally resumes rollout of troubled Windows 10 October 2018 Update

The major feature update to Windows 10 will begin rolling out again more than one month after it...

How to configure LibreOffice to automatically save in MS Office

If you collaborate with others on documents and need to configure LibreOffice to automatically...

How to get error messages in Windows 10 in plain English with the System Diagnostic Report

Tired of sifting through hex codes in the Performance Monitor to figure out what's going wrong?...

9 ways to clean foreign or imported data

Whether you're importing data into Access or Excel, Excel is a great place to clean data before...

  • What is open source?

    Thursday, 15 November 2018 22:30
  • How to use Hangouts Chat

    Thursday, 15 November 2018 17:30
  • Windows 10 October 2018 Update broken your network drives? Here's a possible fix

    Thursday, 15 November 2018 14:30
  • Raspberry Pi 3 Model A+ review: A $25 computer with a lot of promise

    Thursday, 15 November 2018 09:30
  • How to make LibreOffice Writer remember your last cursor position

    Wednesday, 14 November 2018 17:30
  • How to download your data stored by Apple

    Tuesday, 13 November 2018 20:30
  • Microsoft finally resumes rollout of troubled Windows 10 October 2018 Update

    Tuesday, 13 November 2018 19:30
  • How to configure LibreOffice to automatically save in MS Office

    Tuesday, 13 November 2018 18:30
  • How to get error messages in Windows 10 in plain English with the System Diagnostic Report

    Tuesday, 13 November 2018 18:30
  • 9 ways to clean foreign or imported data

    Tuesday, 13 November 2018 18:30