NPTEL Cloud Computing Week 4 Assignment
Uploaded by
tipon82206NPTEL Cloud Computing Week 4 Assignment
Uploaded by
tipon82206Common questions
Powered by AIAPIs are crucial beyond web development as they define how software systems interact, facilitating integration across applications and platforms. They enable diverse systems, possibly built in different languages, to communicate, allowing developers to build complex, interoperable infrastructures efficiently through standardized interfaces .
TLS combines symmetric and asymmetric encryption to optimize data security and performance. Asymmetric encryption secures the initial exchange of encryption keys, ensuring secure handshakes, while symmetric encryption efficiently encrypts data during ongoing communication, providing fast and secure data transmission .
Google Endpoint APIs authenticate using JSON web tokens, Firebase auth, and API keys, excluding passwords. The exclusion of passwords is significant because it reduces potential security risks associated with password management, such as password leaks and vulnerabilities. Methods like JSON web tokens and API keys provide more secure and scalable authentication processes .
IAM frameworks manage user roles and access permissions, centralizing control over who can access specific resources. This governance ensures only authorized users access critical systems, which enhances security and compliance by enforcing consistent access policies and enabling audits and user activity monitoring .
Unlike a direct exchange system, Cloud Pub/Sub acts as a middleware that uses message stores to buffer and manage data, allowing it to support multiple applications without direct communication between publishers and subscribers. This design enables asynchronous communication and enhances the system's scalability and reliability .
In the GCP shared security model for PaaS, identity security is managed by Google, which means Google takes responsibility for securing the authentication mechanisms and ensuring user identity protection. This reduces the burden on users or organizations to implement their own identity security measures, streamlining security operations .
API keys in Cloud Endpoints secure APIs by limiting access to authorized clients. This is crucial for developers as it prevents unauthorized access, protecting the system from potential security breaches and misuse, thereby ensuring that only verified applications or users interact with the endpoint .
SHA-1 is considered no longer secure due to vulnerabilities that allow potential collision attacks, compromising data integrity. This impacts data encryption practices by necessitating the use of more secure versions like SHA-512, which provide stronger cryptographic security suitable for protecting sensitive data against tampering .
Data sovereignty issues arise when cloud service providers are located in different countries from the data owners, complicating compliance with local data protection regulations. Performance limitations occur because cloud storage may not match the speed and accessibility of local on-premises storage systems, potentially affecting time-critical applications .
In IAM, roles such as Owner, Editor, and Viewer have distinct permissions. Owners have full access, including role management, Editors can modify code and deploy applications, and Viewers are limited to read-only access. These roles help structure permission levels, enhancing security by preventing unauthorized modifications and ensuring proper access controls .