Star InactiveStar InactiveStar InactiveStar InactiveStar Inactive
 

When companies move to the cloud, it’s paramount that they know where the provider’s security role ends and where the customer’s begins. The shared-responsibility model is one of the fundamental underpinnings of a successful public cloud deployment. It requires vigilance by the cloud provider and customer—but in different ways. Amazon Web Services (AWS), which developed the philosophy...

The post Awareness of shared-responsibility model is critical to cloud success appeared first on The Troposphere.


When companies move to the cloud, it’s paramount that they know where the provider’s security role ends and where the customer’s begins.

The shared-responsibility model is one of the fundamental underpinnings of a successful public cloud deployment. It requires vigilance by the cloud provider and customer—but in different ways. Amazon Web Services (AWS), which developed the philosophy as it ushered in public cloud, describes it succinctly as knowing the difference between security in the cloud versus the security of the cloud.

And that model, which can be radically different from how organizations are used to securing their own data centers, often creates a disconnect for newer cloud customers.

“Many organizations are not asking the right question,” said Ananda Rajagopal, vice president of products at Gigamon, a network-monitoring company based in Santa Clara, Calif. “The right question is not, ‘Is the cloud secure?’ It’s, ‘Is the cloud being used securely?'”

And that’s a change from how enterprises are used to operating behind the firewall, said Abhi Dugar, research director at IDC. The security of the cloud refers to all the underlying hardware and software:

  • compute, storage and networking
  • AWS global infrastructure

That leaves everything else—including the configuration of those foundational services—in the hands of the customer:

  • customer data
  • apps and identify and access management
  • operating system patches
  • network and firewall configuration
  • data and network encryption

Public cloud vendors and third-party vendors offer services to assist in these areas, but it’s ultimately up to the customers to set policies and track things.

The result is a balancing act, said Jason Cradit, senior director of technology at TRC Companies, an engineering and consulting firm for the oil and gas industry. TRC, which uses AWS as its primary public cloud provider, turns to companies like Sumo Logic and Trend Micro to help segregate duties and fill the gaps. And it also does its part to ensure it and its partners are operating securely.

“Even though it’s a shared responsibility, I still feel like with all my workloads I have to be aware and checking [that they] do their part, which I’m sure they are,” Cradit said. “If we’re going to put our critical infrastructure out there, we have to live up to standards on our side as much as we can.”

Trevor Jones is a news writer with SearchCloudComputing and SearchAWS. Contact him at This email address is being protected from spambots. You need JavaScript enabled to view it..

The post Awareness of shared-responsibility model is critical to cloud success appeared first on The Troposphere.


Read full article on Cloud Computing from IT knowledge exchange


Powered by Preisvergleich


My Tweets

Last Articles

How to find files in macOS using the Leap, Fresh, and Yep apps

Ironic Software's trio of search tools are designed to make it easier to find files on a Mac. But...

Open source may be the future, but very few are writing it

Contributing to open source gives developers and companies big advantages, but that’s not...

The five best Linux desktop distributions

Jack Wallen lays out his top five desktop distributions, each of which would be a great choice to...

EUC Weekly Digest – April 20, 2019

Interesting EUC items from last week: Citrix Virtual Apps and Desktops Considerations for running...

How to access and organize files faster in G Suite using Priority and Workspaces

Google Drive Priority suggests a short list of files you might find useful, while Workspaces lets...

How to create custom quick actions with Automator in macOS

Jack Wallen shows you how to use the macOS Automator tool to simplify your mobile workflow.

How to troubleshoot Apple Mail connectivity issues with Connection Doctor

If you're not sure where to start the troubleshooting process for Apple Mail connectivity issues,...

How to easily install Kernel 5.0 on Ubuntu and Ubuntu-based distributions

Jack Wallen shows you how to safely and simply install the Linux 5.0 kernel on Ubuntu and...

How to use Firefox Send

Sending larger files doesn't get much easier than Mozilla's new service, Firefox Send.

How to use Firefox Send

Sending larger files doesn't get much easier than Mozilla's new service, Firefox Send. Jack Wallen...

  • How to find files in macOS using the Leap, Fresh, and Yep apps

    Monday, 22 April 2019 22:30
  • Open source may be the future, but very few are writing it

    Monday, 22 April 2019 22:30
  • The five best Linux desktop distributions

    Monday, 22 April 2019 17:30
  • EUC Weekly Digest – April 20, 2019

    Saturday, 20 April 2019 15:31
  • How to access and organize files faster in G Suite using Priority and Workspaces

    Friday, 19 April 2019 23:30
  • How to create custom quick actions with Automator in macOS

    Friday, 19 April 2019 19:30
  • How to troubleshoot Apple Mail connectivity issues with Connection Doctor

    Friday, 19 April 2019 19:30
  • How to easily install Kernel 5.0 on Ubuntu and Ubuntu-based distributions

    Friday, 19 April 2019 19:30
  • How to use Firefox Send

    Friday, 19 April 2019 19:30
  • How to use Firefox Send

    Friday, 19 April 2019 18:30