Study Notes on Cloud Infrastructure and Security

Overview of Modern Voice Services and Infrastructure

  • Transition from traditional telephony to modern systems

    • Voice over IP (VoIP): Primary method of phone communication now.

    • Traditional telephone systems are largely obsolete.

Server Requirements for VoIP and Other Systems

  • Needs for servers in various applications

    • Voice services, camera systems, intercoms, door controllers all require servers.

    • Importance of redundancy:

    • Typically, two servers are needed for fault tolerance.

  • Comments on server costs:

    • Low-grade servers: start at a couple of thousand dollars.

    • High-end server example: $22,000 paid for a beefy server.

Work from Home Scenarios

  • Increased prevalence of remote work post-COVID.

  • New challenges introduced

    • Contractors and users are now often outside the company's immediate environment.

    • Requirement for secure access back into the environment.

  • Tools needed:

    • VPN: to enable secure connections.

    • Remote access servers: must be set up and maintained.

/

Financial Implications of IT Infrastructure

  • Initial investment in IT infrastructure can be significant

    • Example costs can stack high when factoring in networking equipment (switches, routers, firewalls).

  • Early 2000s context: High costs led to business challenges for startups.

Emergence of Cloud Computing

  • Cloud Computing: Allowed access to shared resources managed by remote servers, primarily initiated by Amazon in the late 1990s to early 2000s.

  • Cloud Services Providers (CSPs):

    • Major players include Amazon, Microsoft, and Google.

    • Shift from owning hardware to renting servers transformed business startup landscapes.

  • Benefits of cloud adoption:

    • Significantly lowers upfront costs for businesses.

    • Reduces individual burden of managing hardware problems (e.g., hard drive failures).

    • Scalability: easy to increase resources (e.g., RAM, storage space) as needed.

    • Accessible from anywhere, increasing usability but introducing security risks.

Security Concerns with Cloud Usage

  • Access control: Becomes crucial with cloud.

    • Challenge of misconfigurations leading to exposure (e.g., public access to cloud storage).

  • Security value proposition:

    • Small firms may enjoy better security via CSPs than they could provide independently.

    • Larger firms may find CSP's security inadequate for their needs.

Cloud Computational Characteristics

  • On-Demand Self-Service: Users can provision resources as needed without human interaction.

  • Broad Network Access: Resources accessible from multiple devices and locations.

  • Resource Pooling: CSPs share resources among multiple customers to improve efficiency and cost.

  • Rapid Elasticity: Resources can scale up or down quickly in response to demand.

  • Measured Service: Customers only pay for what they use, similar to utilities.

Pros and Cons of Cloud Adoption

  • Highlights the shift from traditional model (CapEx) to cloud model (OpEx)

  • CapEx (Capital Expenditure): Upfront investment, ownership of assets; involves maintenance and failure responsibility.

  • OpEx (Operational Expenditure): Ongoing payments only for what is used; limited ongoing commitment.

Public vs Private Cloud Models

  • Public Cloud:

    • Services available to general public via CSPs. Examples include Google Drive, iCloud.

  • Private Cloud:

    • Exclusive to one organization; example: company hosting servers within their dedicated data centers.

  • Hybrid Cloud:

    • Combines public and private; allowing flexibility in resource management (e.g., hosting web servers in the cloud while keeping sensitive data on-prem).

Consumption-Based Model and its Implications

  • Pay-as-you-go model is how CSPs operate.

  • Monitoring and managing resources is vital to avoid unexpected costs.

    • Risks of

    • VM sprawl: Excess unmonitored VMs can waste resources and create security vulnerabilities.

Cloud Service Models and Responsibilities

  • Software as a Service (SaaS):

    • No hardware or software control beyond access management; used for applications like QuickBooks.

  • Platform as a Service (PaaS):

    • Users develop custom applications on prebuilt platforms but do not manage the underlying OS or hardware.

  • Infrastructure as a Service (IaaS):

    • Users manage the OS and applications but not the hardware. Highest level of control among the service models.

High Availability and Disaster Recovery in the Cloud

  • High Availability: Designed to prevent total downtime, but reality of outages exist (e.g., Amazon, Microsoft outages).

  • Service Level Agreements (SLAs) provide a safety net:

    • Outline responsibilities and potential financial credits if services go down beyond defined performance thresholds.

Conclusion and Considerations

  • Understanding the differences between CSP offerings is vital for making informed organizational decisions.

  • The growth and reliance on cloud services indicate a significant shift in IT infrastructure management, offering both vast benefits and notable challenges to security and access control management.