1 of 46

Cloud Computing and Security

Prof. Meet Hudani

Cyber Security Trainer

2 of 46

Importance of Cloud Technology in Corporates

CHAPTER-4

3 of 46

Importance of Cloud Computing Technologies for Corporates

•Cloud technology offers many significant advantages to businesses. This is the reason why it has begun to dominate the workplace, a trend that is only expected to continue strong. 

•With cloud computing, you gain access to several tools that can enhance the operation of your organization and improve the quality of your services.

•Different types of cloud computing technologies, depending on the needs of your business.

  • Iaas
  • Paas
  • Saas

4 of 46

1)Boost Data Security

  • One of the main concerns about storing data on the cloud is data security. However, most cloud-based systems offer enhanced security.

  • They are using encryption and the latest security practices to protect data from hackers.

  • Storing data in the cloud often provides a more secure environment than on-premises solutions, and corporations can leverage the expertise of cloud providers to enhance their overall security posture.

5 of 46

How to enhance data security in cloud?

  • Enhancing data security in the cloud is crucial to safeguard sensitive information and ensure the integrity of corporate data.

  • Here are several best practices and strategies to enhance data security in a cloud environment:

a)Data Encryption:

  • Implement robust encryption mechanisms for data both in transit and at rest. Use encryption protocols such as SSL/TLS for data in transit and encryption algorithms like AES for data at rest.

b)Access Controls:

  • Implement strict access controls and least privilege principles. Ensure that only authorized personnel have access to sensitive data.

6 of 46

3)Multi-Factor Authentication (MFA):

  • Enforce multi-factor authentication for accessing cloud accounts and services. This adds an additional layer of security by requiring users to verify their identity using more than one method (e.g., password and mobile device authentication).

4)Regular Audits and Monitoring:

  • Conduct regular security audits and assessments to identify vulnerabilities and potential threats.

7 of 46

2)Cost effective

  • When you are using cloud technologies, you don’t need to buy any hardware or an expensive piece of software.

  • Instead, many cloud-based applications offer affordable fees and even offer pay-per-use services

  • Thus, the user only need to pay for the services that is been used by him and so the vendor will charge according to the usage.

8 of 46

Strategies for achieving cost efficiency in the cloud

a) Right size Resources

  • Regularly analyze your resource usage to ensure that you are not over-provisioning or underutilizing resources. Many cloud providers offer tools and services that help identify and rightsize instances based on actual usage.

b) Implement Auto-Scaling:

  • Utilize auto-scaling groups to automatically adjust the number of instances based on demand. This ensures that you have enough resources during peak periods and can scale down during periods of lower demand.

c) Monitor and Optimize Storage:

  • Regularly review and optimize storage usage. Delete unnecessary data and leverage features like auto-tiering for object storage to automatically move data between storage classes based on access patterns.

9 of 46

3)Offers Scalability

  • One of the biggest benefits that you will get from cloud technology is its scalability. At any given moment, you can choose to scale up or down so that your needs are completely met.

  • Having no limit permits you to grow your business without worrying about a thing.

10 of 46

4)Cover the Business’s Storage Needs

  • The great thing about cloud technologies is that they are not bound by hardware or any physical devices.

  • This means that you can store your company’s data on the cloud and forget about having to get additional storage space.

11 of 46

5)Disaster Recovery Option

  • There is no denying that you might encounter unexpected events at any moment.

  • When this happens, it is important to have a system that can recover your data quickly and efficiently.

  • Most cloud-based systems are dependable and can work as your disaster recovery option.

  • Cloud technology has made a difference in the way that businesses operate. By implementing cloud computing technologies, you can bring automation that will make your work more efficient.

12 of 46

What is cloud economics

  • Cloud economics is the process of examining the financial and functional impact of cloud computing on an organization. Leaders assess the critical elements involved in a potential cloud migration.

  • A cloud economics analysis weighs financial factors such as return on investment (ROI), legacy hardware investment, and the total cost of ownership (TCO) for the cloud versus on-premises data centers.

  • Cloud economics studies the financial impact of cloud computing, including elements such as legacy hardware investments, monthly cloud service budgeting, and projected savings due to better collaboration and technical innovations, to help an organization better assess its situation. 

13 of 46

Pillars of cloud economics

  • A common cloud economics approach involves breaking the analysis down across the following four pillars:

  • Total cost of ownership
  • Efficiency improvements
  • Operational resilience
  • Operational agility

14 of 46

1)Total cost of ownership

  • A data center TCO analysis includes infrastructure costs, such as the purchase or lease of the physical building, power and cooling systems, and networking.

  • Additionally, there are costs associated with hardware and software; personnel, including salaries and benefits for IT staff; maintenance and support, including software updates; and energy given that data centers require a substantial amount of power to operate.

  • In a cloud model, the TCO shifts to monthly usage costs for compute and storage, and outlines how a shift in staffing needs will affect payroll.

  • A cloud economics analysis breaks these details down, providing cost/benefit insights across the organization.

15 of 46

2)Efficiency improvements

  • Cloud platforms provide organizational benefits, including improved collaboration and stronger DevOps support.

  • Efficiency improvements can vary in size and scope; some examples include faster data sharing between sales and marketing teams, new IT innovations after freeing staff from data center responsibilities, and automatic data integration into applications such as self-service analytics.

16 of 46

3)Operational resilience

  • Local data centers face a constant risk of real-world issues affecting availability.

  • Natural disasters, power outages, and even local politics regarding infrastructure can all cause unexpected downtime for on-premises equipment.

  • Cloud providers build uptime guarantees into service level agreements and design their business models around redundancy, giving customers greater resilience.

17 of 46

4)Operational agility

  •  Many different factors can change the volume of network traffic, including app updates and remote access.

  • To absorb these spikes, on-premises data centers need the physical resources to handle peak loads. In a cloud environment, scalability becomes as simple as upgrading to a higher service tier.

  • This creates organizational agility, whether spikes are temporary, such as with holiday sales, or the start of significant and lasting growth.

18 of 46

Total Cost of Ownership(TCO)

19 of 46

Total Cost of Ownership(TCO)

  • The total cost of ownership in cloud computing refers to the total cost of adopting, operating, and provisioning cloud infrastructure.

  •  Organizations often find it necessary to perform a cloud TCO analysis when they are considering moving to the cloud because it allows them to weigh the cost of cloud adoption against the cost of running their current on-premise systems.

  • When businesses calculate cloud TCO, they often make an apples-to-apples comparison of the costs of running an on-premise system versus the cost of running the same system in the cloud. That is, comparing the initial purchase price of hardware and software in an on-premise environment to the monthly subscription cost of cloud computing.

20 of 46

  • For example, a common starting point might be: “How much will it cost to run my on-premises system in the cloud?” or “If I have 3,000 traditional servers in my datacenter, what is the rack-rate for 3,000 compute instances of similar CPU, memory, and networking capacity in the cloud over x period?

  • TCO intends to uncover both the direct and indirect costs of owning and procuring certain assets or products.

  • It includes a few key components:
  • Acquisition/Physical Hardware costs
  • Operations Costs
  • Personnel Costs

21 of 46

Steps For Calculating Cloud TCO

Step 1: Calculate your current IT infrastructure costs:

  • Understanding the actual cost of your current IT solution is the first step.

  • This means calculating the direct and indirect costs of running and maintaining your current system as well as estimating your current workloads, including servers, databases, storage, and network bandwidth.

22 of 46

  • Consider the following cost areas:

  • Hardware and infrastructure—Identify the cost of the hardware that powers your on-premise application. These include physical servers, supplies, spare parts, etc.

  • Datacenter—How much does it cost to power your data center? How much does it cost to meet your current cooling, power, and space requirements?

  • Software—Calculate your current software usage, including the number of licenses and cost of these licenses.

23 of 46

  • Personnel—Identify all the personnel involved in system, network, and database administration and how much it costs to payroll them.

  • Disaster recovery—If you have a disaster recovery system in place, how much does it cost to maintain and manage that site?

  • Upgrades—How much will it cost to upgrade the system if the need arises? Would you need to overhaul the system completely?

  • Security—Estimate the total cost of securing your current system, from the cost of physical security to firewalls and security experts.

24 of 46

Step 2: Estimate the cost of a cloud solution

  • Next, calculate the cost of operating your applications in the cloud. Keep in mind that many of the cost areas considered for on-premises infrastructure will not apply in the cloud because they will be offloaded to the cloud service provider. However, it’s important to note that a cloud solution is not inherently cheaper than on-premises infrastructure.

  • When businesses switch to the cloud, they often assume that their cloud bill will be automatically cheaper. But the on-demand nature of cloud services means your cloud bill could quickly spiral out of control as developers deploy instances and move at the speed of the cloud.

  • Understanding the major cost areas in the cloud is key to optimizing your cloud cost and ensuring a lower TCO.

25 of 46

Step 2: Estimate the cost of a cloud solution

  • Two of the major cost areas to consider for the cloud are migration costs and the monthly cost of your selected cloud services.

  1. Migration cost:

  • Moving your applications and data to the cloud is a key step when switching to the cloud. Your current applications may require modification to function properly in the cloud

26 of 46

Step 2: Estimate the cost of a cloud solution

  • Ways to move applications to your cloud:

  • Rehosting applications without making any changes to their architecture

  • Refactoring or running applications on a cloud provider’s infrastructure

  • Revising the application, i.e. modifying or extending the existing code base

  • Rebuilding or rearchitecting the entire application for the cloud

  • Replacing the application with commercial software delivered as a service

27 of 46

Step 2: Estimate the cost of a cloud solution

2. Monthly cloud cost:

  • Your monthly cloud cost will depend on your workloads, and the specific cloud services consumed and method of purchase. The goal here is to estimate your potential monthly cloud bill based on your current workloads.

  • Since this calculation differs considerably for each organization, major cloud platforms provide pricing calculators that make it easier to estimate your monthly cloud bill. The AWS pricing calculator, for example, allows you to estimate your infrastructure cost based on the retinue of AWS products and services selected.

28 of 46

Step 2: Estimate the cost of a cloud solution

3. Consultation and training costs:

  • If your team lacks the expertise required for the migration process, factor in the cost of hiring consultants for training.

29 of 46

Step 3: Consider the intangible benefits of the cloud

1. Innovation and Collaboration:

  • Cloud computing fosters innovation by providing access to advanced technologies, tools, and development platforms.
  • Collaboration tools and cloud-based productivity suites enable teams to work together more effectively, share ideas, and iterate on projects in real-time, regardless of their location.
  • This collaborative environment encourages creativity, problem-solving, and knowledge sharing, driving innovation within organizations.

30 of 46

Step 3: Consider the intangible benefits of the cloud

2. Elasticity:

  • Handling demand in an on-premise environment is always a challenge. The solution is usually to maintain redundant infrastructure in anticipation of peak loads. In the cloud, however, you could easily deploy instances to take care of the additional peak without any downtime.

  • Overall, TCO analysis provides a comprehensive view of the financial implications of adopting cloud computing, helping organizations make informed decisions about resource allocation, cost optimization strategies, and cloud vendor selection to maximize value and minimize total ownership costs.

31 of 46

Return on Investment(ROI)

  • ROI is a financial metric that compares the benefits and costs of a project or a decision. It is usually expressed as a percentage or a ratio.

  • A higher ROI means that the project or decision generates more value than it costs. A lower ROI means that the project or decision is less profitable or even loss-making. 

  • Cloud computing can offer many benefits, such as scalability, flexibility, security, innovation, and efficiency. However, cloud computing also involves costs, such as subscription fees, migration expenses, training, and maintenance.

32 of 46

Return on Investment(ROI)

  • By measuring the ROI of cloud computing, you can assess whether the benefits outweigh the costs, and how you can improve your cloud performance and savings.

  • Calculating ROI for cloud computing requires you to identify and quantify the benefits and costs of your cloud solution, which may vary depending on the model.

  • For example, Infrastructure as a Service (IaaS) benefits include reduced capital expenditure and faster deployment, but costs include subscription fees and security.

33 of 46

Return on Investment(ROI)

  • Platform as a Service (PaaS) benefits include increased productivity and easier integration, yet costs involve subscription fees and vendor lock-in.

  • Software as a Service (SaaS) benefits include lower upfront costs and improved accessibility, but costs include subscription fees and user adoption.

  • How to calculate ROI in cloud :

34 of 46

Return on Investment(ROI)

  • For example, if you expect to invest $2,500 in cloud services and support for year 1, and you project earnings (cost savings and new revenue) of $10,000 after the first year as a result of your investment, then your projected ROI is 300 percent, computed as follows:

35 of 46

Economics of choosing a Cloud platform for an organization

  • Based on application requirements, economic constraints and business needs:

1 Total Cost of Ownership (TCO):

  • Consider the long-term TCO associated with each cloud platform, including upfront costs, ongoing operational expenses, and potential hidden costs.

  • Evaluate pricing structures, including compute, storage, data transfer, and additional services, to determine the most cost-effective option for the organization's budget.

36 of 46

Economics of choosing a Cloud platform for an organization

2. Scalability and Elasticity:

  • Assess the scalability and elasticity features of each cloud platform to ensure the organization can accommodate growth and fluctuations in demand without incurring excessive costs.

  • Look for pay-as-you-go pricing models and auto-scaling capabilities to optimize resource utilization and minimize costs during periods of low demand.

37 of 46

Economics of choosing a Cloud platform for an organization

3. Performance Optimization:

  • Consider the performance characteristics of each cloud platform and how they align with the organization's application requirements.

  • Evaluate options for optimizing performance, such as selecting the right instance types, and leveraging caching and acceleration services, while balancing costs.

38 of 46

Economics of choosing a Cloud platform for an organization

4. Data Storage and Processing Costs:

  • Analyze the costs associated with storing and processing data on each cloud platform, taking into account factors such as storage volume, data access patterns, and processing requirements.

  • Choose storage solutions and data processing services that offer the best balance between performance and cost efficiency, considering options like object storage, managed databases, and serverless computing.

39 of 46

Economics of choosing a Cloud platform for an organization

5. Security and Compliance Expenses:

  • Evaluate the security features and compliance certifications offered by each cloud platform and the associated costs.

  • Consider the potential costs of implementing additional security controls, conducting audits, and ensuring compliance with industry regulations and data protection laws.

40 of 46

Economics of choosing a Cloud platform for an organization

6. Vendor Lock-in Risks and Flexibility:

  • Assess the potential costs and risks associated with vendor lock-in when choosing a cloud platform.

  • Consider options for maintaining flexibility and avoiding dependence on a single vendor, such as adopting multi-cloud or hybrid cloud strategies, and the associated costs and complexities.

  • By carefully considering these economic factors in conjunction with application requirements, economic constraints, and business needs, organizations can make informed decisions when choosing a cloud platform that maximizes value and minimizes costs over the long term.

41 of 46

Industry cases including open sources.

  • Several examples of open-source cloud computing technologies that are widely used in the industry. Here are some popular ones:

  1. OpenStack: OpenStack is a widely used open-source cloud computing platform that provides a comprehensive set of tools and services for building and managing public and private clouds.

  • OpenStack is highly modular and flexible, allowing users to create and manage cloud computing environments that meet their specific needs.

  • Industry Case: CERN (European Organization for Nuclear Research) uses OpenStack to manage its massive computing infrastructure

42 of 46

Industry cases including open sources.

2. Kubernetes: Kubernetes, often abbreviated as K8s, is an open-source container orchestration platform for automating the deployment, scaling, and management of containerized applications.

  • It provides a powerful and flexible way to manage containerized workloads across clusters of machines, making it well-suited for cloud computing environments.

  • Industry Case: Spotify, a popular music streaming service, uses Kubernetes to manage its microservices architecture. By adopting Kubernetes, Spotify can deploy and scale its services efficiently, ensuring a reliable and responsive experience for millions of users worldwide.

43 of 46

Industry cases including open sources.

3. Docker: Docker is an open-source platform that allows developers to automate the deployment, packaging, and running of applications in lightweight, portable containers.

  • Containers provide a consistent and reproducible way to package and distribute applications, making them well-suited for cloud computing environments where scalability and portability are important.

  • Industry Case: eBay, one of the world's largest online marketplaces, uses Docker to streamline its application deployment process. By containerizing applications with Docker, eBay can package dependencies and configurations, making it easier to deploy and manage applications across its infrastructure.

44 of 46

Industry cases including open sources.

4. Linux:

  • Linux is an open-source operating system widely used in cloud computing environments due to its stability, security, and flexibility.

  • Industry Case: Amazon Web Services (AWS), one of the largest cloud service providers, relies heavily on Linux for its cloud infrastructure. The majority of AWS's virtual machine instances run on Linux, powering services like Amazon EC2 (Elastic Compute Cloud) and Amazon RDS (Relational Database Service).

45 of 46

References

  1. https://pages.awscloud.com/OverviewofAWSCloudEconomics_eBook.html

46 of 46

www.paruluniversity.ac.in