lOMoARcPSD|57037475

Unit 28 - Cloud-Computing - Assignment 2023

HND In Computing (ESOFT Metro Campus)

Scan to open on Studocu

Studocu is not sponsored or endorsed by any college or university

Downloaded by diwanshu (diwanshuanime@[Link])
 lOMoARcPSD|57037475

Higher Nationals
Internal verification of assessment decisions – BTEC (RQF)
INTERNAL VERIFICATION – ASSESSMENT DECISIONS

Programme title BTEC Higher National Diploma in Computing

Assessor Internal Verifier

Unit 28: Cloud Computing
Unit(s)
Researching, Planning and Implementing a could solution for Retail
Assignment title
Enterprises
Mineth neerada rathnayake
Student’s name
List which assessment criteria Pass Merit Distinction
the Assessor has awarded.

INTERNAL VERIFIER CHECKLIST

Do the assessment criteria awarded match

those shown in the assignment brief? Y/N

Is the Pass/Merit/Distinction grade awarded

justified by the assessor’s comments on the Y/N
student work?
Has the work been assessed
Y/N
accurately?
Is the feedback to the student?
Give details:
• Constructive? Y/N
• Linked to relevant assessment criteria? Y/N
• Identifying opportunities for Y/N
improved performance?
• Agreeing actions? Y/N
Does the assessment decision need
Y/N
amending?

Assessor signature Date

Internal Verifier signature Date

Programme Leader signature (if required)
Date

Confirm action completed

Remedial action taken
Give details:

Assessor signature Date

Internal Verifier
Date
signature
Programme Leader
Date
signature (if required)

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Higher Nationals - Summative Assignment Feedback Form

Student Name/ID Mineth neerada rathnayake E155173

Unit Title Unit 28: Cloud Computing

Assignment Number 1 Assessor

2024.07.24 Date Received
Submission Date
1st submission
Date Received 2nd
Re-submission Date
submission
Assessor Feedback:
LO1. Demonstrate an understanding of the fundamentals of Cloud Computing and its architectures.
Pass, Merit & Distinction P1 P2 M1
Descripts

LO2. Evaluate the deployment models, service models and technological drivers of Cloud Computing
and validate their use.
Pass, Merit & Distinction P3 P4 M2 D1
Descripts

LO3. Develop Cloud Computing solutions using service provider’s frameworks and open source tools.
Pass, Merit & Distinction P5 P6 M3 D2
Descripts

LO4. Analyse the technical challenges for cloud applications and assess their risks.
Pass, Merit & Distinction P7 P8 M4 D3
Descripts

Grade: Assessor Signature: Date:

Resubmission Feedback:

Grade: Assessor Signature: Date:

Internal Verifier’s Comments:

Signature & Date:

* Please note that grade decisions are provisional. They are only confirmed once internal and external moderation has taken place and
grades decisions have been agreed at the assessment board.

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Assignment Feedback
Formative Feedback: Assessor to Student

Action Plan

Summative feedback

Feedback: Student to Assessor

Assessor Date
signature

Student Date
signature

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Pearson Higher Nationals in

Computing
Unit 28: Cloud Computing
Assignment 01

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

General Guidelines

1. A Cover page or title page – You should always attach a title page to your assignment. Use previous
page as your cover sheet and make sure all the details are accurately filled.
2. Attach this brief as the first section of your assignment.
3. All the assignments should be prepared using a word processing software.
4. All the assignments should be printed on A4 sized papers. Use single side printing.
5. Allow 1” for top, bottom , right margins and 1.25” for the left margin of each page.

Word Processing Rules

1. The font size should be 12 point, and should be in the style of Time New Roman.
2. Use 1.5 line spacing. Left justify all paragraphs.
3. Ensure that all the headings are consistent in terms of the font size and font style.
4. Use footer function in the word processor to insert Your Name, Subject, Assignment No, and
Page Number on each page. This is useful if individual sheets become detached for any reason.
5. Use word processing application spell check and grammar check function to help editing your
assignment.

Important Points:

1. It is strictly prohibited to use textboxes to add texts in the assignments, except for the compulsory
information. eg: Figures, tables of comparison etc. Adding text boxes in the body except for the
before mentioned compulsory information will result in rejection of your work.
2. Carefully check the hand in date and the instructions given in the assignment. Late submissions
will not be accepted.
3. Ensure that you give yourself enough time to complete the assignment by the due date.
4. Excuses of any nature will not be accepted for failure to hand in the work on time.
5. You must take responsibility for managing your own time effectively.
6. If you are unable to hand in your assignment on time and have valid reasons such as illness, you
may apply (in writing) for an extension.
7. Failure to achieve at least PASS criteria will result in a REFERRAL grade .
8. Non-submission of work without valid reasons will lead to an automatic RE FERRAL. You will then
be asked to complete an alternative assignment.
9. If you use other people’s work or ideas in your assignment, reference them properly using
HARVARD referencing system to avoid plagiarism. You have to provide both in-text citation and
a reference list.
10. If you are proven to be guilty of plagiarism or any academic misconduct, your grade could be
reduced to A REFERRAL or at worst you could be expelled from the course

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Student Declaration

I hereby, declare that I know what plagiarism entails, namely to use another’s work and to present it as
my own without attributing the sources in the correct form. I further understand what it means to copy
another’s work.

1. I know that plagiarism is a punishable offence because it constitutes theft.

2. I understand the plagiarism and copying policy of Edexcel UK.
3. I know what the consequences will be if I plagiarise or copy another’s work in any of the
assignments for this program.
4. I declare therefore that all work presented by me for every aspect of my program, will be my own,
and where I have made use of another’s work, I will attribute the source in the correct way.
5. I acknowledge that the attachment of this document signed or not, constitutes a binding
agreement between myself and Pearson, UK.
6. I understand that my assignment will not be considered as submitted if this document is not
attached to the assignment.

Student’s Signature: Date:

(Provide E-mail ID) (Provide Submission Date)

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Higher National Diploma in Business

Assignment Brief
Student Name /ID Number Mineth neerada Rathnayake E155173

Unit Number and Title Unit 28: Cloud Computing

Academic Year 2022/23

Unit Tutor Mr ravindu Ishara

Assignment Title Retail Enterprises

Issue Date 23/04/2024

Submission Date 2024.07.24

IV Name & Date

Submission format

The submission should be in the form of an individual report written in a concise, formal business
style using single spacing and font size 12. You are required to make use of headings, paragraphs
and subsections as appropriate, and all work must be supported with research and referenced
using Harvard referencing system. Please also provide in-text citation and the list of references
using the Harvard referencing system. Please note that this is an activity-based assessment where
your document submission should include evidences of activities carried out.

The recommended word count is 4,000–4,500 words for the report excluding annexures. Note
that word counts are indicative only and you would not be penalised for exceeding the word
count.

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Unit Learning Outcomes:

LO1. Demonstrate an understanding of the fundamentals of Cloud Computing and its

architectures.
LO2. Evaluate the deployment models, service models and technological drivers of Cloud
Computing and validate their use.
LO3. Develop Cloud Computing solutions using service provider’s frameworks and open source
tools.
LO4. Analyse the technical challenges for cloud applications and assess their risks.

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Assignment Brief and Guidance:

Follow the guidelines given below assuming that you have recently joined as a trainee
systems administrator for Retail enterprises, which is specializing in clothing, electronics, and
home goods in country.

Scenario: Retail Enterprises

Background

You have recently been hired as a cloud computing consultant for a group of retail
enterprises, each with several branches across the country. The retail group specializes in
clothing, electronics, and home goods, and has a customer base of a several million. The
company is looking to expand its operations and improve its IT infrastructure to keep up with
its growing business needs.

Note on assumptions to be made: You have been assigned to work with a team of technical
trainees to develop a report titled "Implementation of Cloud Computing Solutions for Retail
Enterprises". The report will detail the technical skills and knowledge required to design and
implement cloud computing solutions for the retail group. You are expected to analyze the
current IT infrastructure of the retail group and recommend cloud computing solutions that
will meet their current and future business needs. You can assume different requirements for
each retail branch and provide acceptable reasons for each recommendation.

Take the following into consideration when developing the report:

You have been asked to support your technical and development executive with the
researching, planning and implementation of a Cloud solution for the existing diversified
clientele of retail enterprises.

Activity 1

Analyze the fundamental concepts of cloud computing and how they apply to the retail group.
Discuss why the retail group should migrate to cloud computing solutions and design an
appropriate cloud computing framework for the retail group by identifying the different
needs of cloud solutions for each retail branch.

Activity 2

Define an appropriate deployment model for the retail group by comparing different cloud
service models. Demonstrate the chosen deployment model with real-world examples and
justify the tools chosen to realize the proposed cloud computing solutions.

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Activity 3

Configure a cloud computing platform using a cloud service provider's framework and
implement a cloud platform using open-source tools for the retail group. Critically discuss the
issues and constraints that you faced during the implementation of the cloud computing
platform and how those issues could be effectively overcome.
.

Activity 4

Analyze and critically assess the common problems and security issues that are likely to arise
in cloud environments and discuss suitable solutions to overcome these issues. Critically
discuss how an organization should protect their data when migrating to a cloud solution such
as the retail group.

10

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Grading Rubric
Grading Criteria Achieved Feedback

LO1. Demonstrate an understanding of the

fundamentals of Cloud Computing and its architectures.

P1 Analyse the evolution and fundamental concepts of Cloud

Computing.
P2 Design an appropriate architectural Cloud Computing
framework for a given scenario.
M1 Discuss why an organisation should migrate to a Cloud
Computing solution.
LO2. Evaluate the deployment models, service models
and technological drivers of Cloud Computing and
validate their use.

P3 Define an appropriate deployment model for a given

scenario.

P4 Compare the service models for choosing an adequate

model for a given scenario.
M2 Demonstrate these deployment models with real world
examples.
LO1 & LO2
D1 Justify the tools chosen to realise a Cloud Computing
solution.
LO3. Develop Cloud Computing solutions using service
provider’s frameworks and open source tools.

P5 Configure a Cloud Computing platform with a cloud

service provider’s framework.
P6 Implement a cloud platform using open source tools.
M3 Discuss the issues and constraints that can be faced during
the
development process.

D2 Critically discuss how issues and constraints during

the development process can be overcome

LO4. Analyze the technical challenges for cloud

applications and assess their risks.
P7 Analyse the most common problems which
arise in a Cloud Computing platform and discuss appropriate
solutions to these problems.
P8 Assess the most common security issues in cloud
environments.

11

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

M4 Discuss how to overcome these security issues when

building a secure cloud platform.
D3 Critically discuss how an organisation should protect
their data when they migrate to a cloud solution.

12

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

13

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Acknowledgement

First of all, a special thanks for my parents. I would like to sincerely Thank my HND lecturers. I
would like to thank the E-soft metro campus staff. Because their significant role in the
Accomplishment of the assignment. I have been guided by lots of my friends’ valuable suggestions
and experience throughout the process Of completing the assignment. Therefore I would also like
to express my gratitude to all of my friends. Without their support and cooperation This
assignment could not have been accomplished. Finally, I would like to thank the people who
helped me guide and blessings. I could finish my assignment successfully.

14

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Activity 01

Analyze the fundamental concepts of cloud computing and how they apply to the retail
group. Discuss why the retail group should migrate to cloud computing solutions and
design an appropriate cloud computing framework for the retail group by identifying the
different needs of cloud solutions for each retail branch.

Analyze the fundamental concepts of cloud computing

USING CLOUD COMPUTING SOLUTIONS FOR RENTAIL

ENTERPRISES

Introduction

The flexible and scalable IT infrastructure enhancement options that cloud computing
provides are highly advantageous for retail enterprises. By leveraging cloud technologies, the
retail organization may increase customer satisfaction, cost-efficiency, and performance.
current condition of the IT infrastructure, outline the fundamentals of cloud computing, and
provide concrete recommendations for implementing cloud solutions across the apparel,
electronics, and home goods sectors.

CLOUD COMPUTING FUNDEMENTAL CONCEPTS

1) Models of cloud services

2) Models of cloud deployment
3) Key Characteristics of cloud computing

15

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

MODELS OF CLOUD SERVICES

1) IaaS – Infrastructure as a service

2) PaaS- platform as a service
3) SaaS- Software as a service

IaaS – Infrastructure as a Service

A cloud computing concept known as Infrastructure as a Service, or IaaS, provides on-

demand access to servers, networking, storage, virtualization, and other computing resources.

Infrastructure as a Service (IaaS) is intriguing since acquiring computing resources to run

programs or store data the traditional way is time- and money-consuming. Organizations that
want to buy equipment must go through drawn-out procurement processes that can take
months. They must invest money in real estate, typically in designated rooms equipped with
electricity and air conditioning. When the systems are deployed, they also need IT personnel
to maintain and run them.

Scaling all of this becomes challenging as the business grows or as demand rises. It's possible
that you will overbuild, exceed your capacity, or wind up having to pay for infrastructure that
you never use.

16

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

We can take IaaS examples as follows:

1) Rackspace
2) Amazon web services (AWS)
3) Elastic Computer cloud ( EC2 )
4) Microsoft Azure
5) Google Computer Engine ( GCE )
6) Joynet

17

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

PaaS- Platform as a Service

Platform as a Service, or PaaS, is a type of cloud computing service model that offers an
adjustable and scalable cloud platform for developing, launching, running, and administering
applications. PaaS gives developers all they need to construct applications, saving them the
trouble of maintaining hardware and updating operating systems and development tools.
Rather, the whole PaaS environment, or platform, is provided by a third-party service
provider via the cloud.

Thanks to PaaS, companies may develop or host new custom apps without having to worry
about the hassle and cost of installing hardware or software. Development teams just need to
pay for pay-as-you-go access to anything from operating systems to development tools to
infrastructure in order to construct unique apps.

This facilitates, speeds up, and secures app development while allowing developers to
concentrate on other projects

We can take PaaS Examples as Follows:

1) Amazon web Services ( AWS )

2) Elastic Beanstalk
3) Windows Azure
4) Heroku
5) [Link]
6) Google app engine
7) Apache Stratos
8) Red hat open shift

18

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

SaaS – Software as a service

The idea of cloud computing, which simplifies user interface design for consumers and
expedites software delivery for enterprises.

SaaS is fundamental to Google Cloud's operations thanks to its extensive global network and
innovative solutions that transform industries.

With Google Cloud, you can develop better SaaS applications, scale efficiently, and finally
grow your company.

We can get SaaS Examples as follows:

1) Google workspace
2) Zoom
3) Dropbox
4) Slack
5) Adobe

19

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

MODELS OF CLOUD DEPLOYMENT

1) Public Cloud
2) Private Cloud
3) Hybrid Cloud

PUBLIC CLOUD

Resources made available online by a third-party provider and shared by consumers and
corporations can be bought or used in a public cloud. Users can pay for more resources in the
public cloud through subscription or pay-per-use payment plans, even though some resources
are provided without charge.

The public cloud enables organizations to take use of cutting-edge technology and expand
globally without having to pay for labor or other expenses out of pocket. These services range
from developer tools and artificial intelligence services to storage and processing power for
nearly any task.

In contrast, private cloud models include a data center that is managed by a vendor either on-
site or off-site, and the resources are exclusively accessible to one business. The public cloud
provides almost infinite scalability and self-service provisioning to satisfy workload and user
demands for enterprises searching for an alternative to conventional on-premises IT
infrastructures or other forms of cloud computing.

We can take these kinds of examples for public cloud

1) Gmail
2) Google Drive
3) Hotmail

20

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

PRIVATE CLOUD

A private cloud is a cloud computing deployment model where all cloud resources are
assigned to a single user group or client. Private cloud, sometimes referred to as internal
private cloud or corporate cloud, offers several benefits to cloud computing systems,
including scalability, flexibility, and faster service delivery. Furthermore, users can maintain
the security, access control, and customization of their on-premises infrastructure because
private clouds are single-tenant.

Previously maintained on-premises, private clouds can now be run on rented hardware within
cloud service providers' data centers.

We can take these kinds of examples for private clouds

1) IBM
2) Cisco
3) Google
4) OpenStack
5) HPE
6) Oracle

21

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

HYBRID CLOUD

Applications can be used in hybrid clouds, which are mixed computing environments that
combine resources for processing, storing, and other needs from public and private clouds,
on-site data centers, and "edge" locations. These days, very few people rely just on one public
cloud, hence hybrid cloud computing strategies are popular.

You may manage workloads and shift them between these various cloud environments using
hybrid cloud solutions. You can also set even more flexible configurations based on your
specific business needs. Businesses seeking to save costs, minimize risk, and enhance their
current capabilities to support digital transformation projects frequently choose for hybrid
cloud systems.

Currently, one of the most popular infrastructure configurations is the hybrid cloud method.
Organizations that migrate to the cloud frequently end up implementing hybrid clouds
because they must move data and applications gradually and methodically. With hybrid cloud
settings, you may benefit from public cloud providers like Google Cloud's numerous options
for storing and accessing data and apps, all while continuing to use on-premises services.

We can get these kinds of examples to HYBRID CLOUD

1) Azure stack
2) Azure Arc
3) Azure VMware Solutions
4) Google Anthos
5) Nutanix Cloud Infrastructure

22

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

KEY CHARACTERISTICS OF CLOUD COMPUTING

1) On demand self service

2) Easy maintenance
3) Economical
4) Measured and Reporting Service
5) Security
6) Automation
7) Large network access
8) Service excellence

ON DEMAND SELF SERVICE

It is among the important and fundamental aspects of cloud computing. It allows the client to
continuously check the capabilities, allocated network storage, and server uptime. This is a
key feature of cloud computing, and a customer can also manage the computer power
according to his requirements.

EASY MAINTENANCE

One of the best things about clouds is this. The servers are easily maintained, and there is
occasionally little to no downtime. Resources powered by cloud computing regularly receive
several updates to maximize their potential and capabilities. Compared to earlier iterations,
the upgrades work faster and are more compatible with the devices.

23

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

ECONOMICAL

This feature of the cloud aids in lowering the organizations' IT expenses. The customer in
cloud computing is responsible for paying the administrator for the space they have utilized.
There are no hidden fees or extra charges that must be paid. The administration is frugal, and
space is typically provided at no cost.

MESURED AND REPORTING SERVICE

One of the numerous features of the cloud that makes it the ideal option for businesses is
reporting services. Services for measuring and reporting are beneficial to cloud providers as
well as their customers. It makes it possible for both the client and the service provider to
keep track of and report on the services used and their purposes. This aids in billing oversight
and guarantees optimal resource utilization.

SECURITY

One of the best aspects of cloud computing is data security. In order to prevent data loss of
any kind, cloud services make a copy of the data that is stored. The copy version is restored
from the other server in the unlikely event that one server loses its data. This capability is
useful when multiple people are working on a single file simultaneously and the file
unexpectedly becomes corrupted.

24

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

AUTOMATION

One crucial aspect of cloud computing is automation. Automation in cloud computing refers
to the capacity of cloud computing to install, configure, and maintain a cloud service
automatically. To put it simply, it's the practice of minimizing manual labor and maximizing
technology. In the cloud ecosystem, automation is more difficult to do. Large storage,
servers, and virtual machines must be installed and used. After being successfully deployed,
these resources also need ongoing upkeep.

LARGE NETWORK ACCESS

The widespread use of cloud computing is one of its main features. With simply a device and
an internet connection, the customer can view cloud data or upload data to the cloud from any
location. With the aid of the internet, these capabilities are reachable from anywhere in the
company. By tracking and ensuring various metrics, such as latency, access time, data
throughput, etc., that represent how customers access cloud services and data, cloud providers
are able to save that substantial network access.

SERVICE EXCELLANCE

Users may be guaranteed to obtain the best possible service thanks to cloud computing.
Service Level Agreements have to incorporate benefits like constant availability and all-
inclusive resources, performance, and bandwidth. Any reduction in these offerings will lead
to a decline in popularity and a loss of customers.

25

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

LETS TALK ABOUT HOW THE FUNDEMENTAL CONCEPTS APPLY

TO THE RENTAL GROUPS

IaaS- Infrastructure as a service applying to rental groups

Scalability:

Retail firms are able to quickly modify their infrastructure to suit varying loads,
particularly during the heaviest shopping seasons.

Economy of scale:

reduces capital costs by eliminating the need for a substantial upfront

investment in physical equipment.

Disaster Recovery:

Provides robust options for recovery and backup to ensure continuous

business operations.

PaaS- Platform as a service applying to rental groups

Development Agility:

Helps expedite the design and deployment of custom apps for inventory management, CRM,
and other business functions.

Facilitates the smoother integration of various apps and services between departments and
branches

.
Innovation:

Fosters innovation by providing tools and frameworks that simplify the process of
developing applications.

26

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

SaaS- Software as a Service applying to rental groups

Standardization ensures consistent software usage across all branches, which boosts
productivity and reduces compatibility issues.

Accessibility:

Permits workers to utilize mobile apps and conduct remote work from any place.

Updates and Maintenance:

The burden of software maintenance and updates is reduced because the supplier handles
these responsibilities.

Public Cloud applying to rental groups

Cost-effective:

This method is suitable for non-sensitive data and applications and reduces expenses by
pooling resources.

Elasticity:

Ideal for handling unpredictable workloads, such as those resulting from marketing
campaigns or flash sales.

Accessibility:

Makes customer-facing apps easier to use by giving users easy access to services from
anywhere.

27

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Private cloud applying to the rental groups

Data security:

Ensures that sensitive and transactional customer data is protected and adheres to legal
requirements.

Customization:

Provides the opportunity to modify the infrastructure to fit specific corporate needs and
procedures.

increases control over the IT environment, which is crucial for sensitive operations like
handling financial transactions and customer data.

Hybrid Cloud applying to the rental groups

Flexibility:

To balance cost-effectiveness and security, use public cloud for general workloads and
private cloud for sensitive data.

Disaster Recovery:

Better disaster recovery capabilities are achieved by leveraging resources from both public
and private clouds.

Scalability:

Allows for seamless scaling by distributing workloads between public and private clouds as
needed.

28

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

DISCUSS WHY THE RETAIL GROUP SHOULD MIGRATE

TO CLOUD COMPUTING SOLUTIONS

1) Scalability

Dealing with Changing Demand:

The retail group can scale up or down its IT resources as per the demand through cloud
computing. This is very crucial during peak shopping seasons like holidays, sales events, new
product releases.

Adaptability:

The capacity of the company to adjust rapidly to market changes and business requirements
without lengthy delays or massive costs of upgrading physical infrastructure.

2) Flexibility

One can achieve flexibility in a number of ways, for as by selecting different tools or using
cloud services.

Cloud computing's adaptability gives businesses with different workloads the freedom to
plan ahead based on their requirements.

Cloud computing platforms offer pre-built features and tools to tailor solutions to the needs
of a company.

A few of the options that cloud computing offers are private, public, and hybrid cloud
platforms, allowing organizations to choose the ones that best fit their requirements.

29

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

3) Cost-Effectiveness

Reduced Capital Expenditure:

By shifting the expense from capital (buying hardware) to operating (pay-as-you-go cloud
services), this lessens the need for a substantial upfront investment.

Optimal Resource Usage:

You may avoid over- or under-provisioning your IT infrastructure by only paying for the
resources you really utilize.

4) Enhance security and data protection

Enhanced Safety Data protection:

Cloud service providers offer advanced security features like data encryption, identity and
access control, and regular security upgrades that could be costly and difficult to implement
internally.

Compliance:

With the help of big cloud providers, who follow numerous industry norms and laws, the
retail group may meet its own compliance requirements.

5) Improved Performance and Dependency

Global Reach:

Cloud services often leverage Content Delivery Networks (CDNs) and many data centers
spread over the globe to ensure fast and trustworthy access to apps and data.

Disaster Recovery:

The extensive disaster recovery options offered by cloud providers ensure that data is
backed up and may be quickly recovered in the case of an outage.

30

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

6) Collaboration in addition to accessibility

Remote Access:

Cloud computing makes it possible for employees to operate remotely by enabling them to
access apps and data from any location with an internet connection.

Tools for Collaboration:

Cloud-based collaboration solutions increase productivity and efficiency by promoting

improved teamwork and communication between clients, employees, and partners.

7) Simplified it Management

Reduced Maintenance:

The retail group's IT staff may focus on strategic projects instead of critical maintenance
because cloud providers manage the underlying infrastructure.

Automated upgrades:

Cloud services that are automatically updated with the newest features and security
upgrades allow the retail organization to always have access to the newest technology
without requiring human intervention.

8) Data-Driven Decision Making

Advanced Analytics:

Cloud solutions come with robust analytics built in, which can quickly process and analyze
large volumes of data to provide insights into customer behavior, sales trends, and
operational efficiency.

Personalization:

The retail company may provide clients customized experiences that increase their level of
satisfaction and loyalty by utilizing cloud-based analytics.

31

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

DESIGN AN APPROPRIATE CLOUD COMPUTING FRAMEWORK

FOR THE RETAIL GROUP BY IDENTIFYING THE DIFFERENT
NEEDS OF CLOUD SOLUTIONS FOR EACH RETAIL BRANCH.

Cloud Computing Framework for the Retail Enterprises

In today's rapidly evolving digital market, retail organizations must employ cutting edge
technologies to maintain their competitiveness, increase operational efficiency, and meet the
growing demands of their customers. Cloud computing, which offers scalable, flexible, and
cheaply priced IT infrastructure, can meet these expectations.

The research, titled "Implementation of Cloud Computing Solutions for Retail Enterprises,"
aims to provide a comprehensive framework for the transition to cloud-based services. Its
goal is to help the retail company implement cloud technology in a way that will accelerate
business growth and improve overall IT capabilities.

Main overview of this Framework

Assessment of requirements
1) Find out what unique needs Every retail Branch have
2) Select appropriate cloud services and deployment models

Cloud Service Models

1) IaaS- Infrastructure as a Service

2) PaaS- Platform as a Service
3) SaaS- Software as a Service

Cloud Deployment models

1) Public cloud
2) Private cloud
3) Hybrid cloud

32

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

How does Cloud Computing needs to each branch

1) Clothing Branch

What we need to do this are,

1) High control over the volume of data.

2) Scalable and dependable online storefront.
3) Control of expenses.
4) Stopping seasonal traffic spikes

Recommendations for Cloud Solutions

1) Achieve a balance between cost and security.

2) In order to manage overall workloads and scale during high season
3) For the protection of confidential client data.

Lets take what kinds of Services we can get

1) Use Azure virtual machines or AWS EC2 for scalable infrastructure.

2) The e-commerce platform, Shopify, ensures excellent availability and dependability.
3) Using Azure App Service, you can create unique apps that help with client interaction
and marketing efforts.

Give reasons for

Scalability:
Public cloud resources can be increased in response to periods of heavy demand.

Security:
Private cloud storage protects sensitive data.

Economy of scale:
Pay-as-you-go during peak hours for public cloud resources.

33

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

2) Electrical Branch

What we need to do this are,

1) Real-time inventory control.

2) advanced data analytics to gain understanding of consumer behavior.
3) Handle transactions securely and compliantly.
4) Reliable channels for correspondence.

Recommendations for these solutions

Infrastructure as a Service (IaaS): Use scalable infrastructure to efficiently handle massive

data volumes and seasonal traffic spikes. Services like AWS, Azure, and Google Cloud offer
elastic computational resources.

SaaS (Software as a Service): Use a robust e-commerce platform, such as Magento

Commerce Cloud or Shopify Plus, to ensure high availability and performance during peak
hours.

Content Delivery Network (CDN): To reduce latency and accelerate client load times,
distribute content globally using a CDN like Cloudflare or AWS CloudFront.

AI/ML Integration: Deliver personalized recommendations, optimize inventories, and raise

overall customer happiness by utilizing cloud providers' AI and machine learning
capabilities.

Cloud Computing's Evolution

The way businesses access, manage, and employ computer resources has totally changed as
a result of the information technology paradigm shift known as cloud computing.
Originating from the initial concepts of virtualization and time-sharing during the 1960s and
1970s, cloud computing has grown into a sophisticated and indispensable technology that
drives modern digital infrastructure. This evolution is marked by significant turning points,
ranging from the 1980s and 1990s with the introduction of the internet and client-server
architecture to the 2000s with the establishment of dependable cloud service providers like
Amazon Web Services (AWS), Google Cloud, and Microsoft Azure. These days, flexibility,
scalability, and accessibility are key components of cloud computing. It enables businesses
to innovate swiftly and adjust to shifting market dynamics. analyzing the origins and
development of cloud computing shows how this technology has changed over time to meet

34

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

the growing needs of businesses, encouraging global cooperation, productivity, and

technological advancement.

1960s: The Theoretical Foundation

Time-sharing systems:

In the 1960s, mainframe computers were large, expensive, and specialized equipment. Time-
sharing allowed multiple users to share a computer's processing power simultaneously,
increasing accessibility to computers. Time-sharing systems, which made use of terminals
connected to the mainframe, allowed multiple users to communicate with the computer at
once.

J.C.R. Licklider:
Known for having envisioned the idea of a "Intergalactic Computer Network," Licklider
foresaw a day when computers would be networked globally, allowing users to access
information and programs from anywhere. This idea was beneficial to the growth of the
internet and cloud computing. The foundation for the networked technology we use today
was established by Licklider's creation of ARPANET, the precursor to the modern internet.

The 1970s and 1980s: The First Steps Forward

Virtual computers, or VMs:

The concept of virtualization was first made widely known in the 1970s by IBM's VM
operating system. Thanks to virtualization, a single physical computer may now operate
many virtual computers, each with its own operating system and collection of applications.
This was a significant advancement toward the concepts of resource pooling and isolation
found in modern cloud computing.

Grid-Based Processing:

The concept of grid computing emerged in the 1980s when several computers with shoddy
connections worked together to finish large-scale projects. This was an early example of
distributed computing, where resources from multiple locations could be used together, much
like modern cloud computing.

35

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

1990s: The Internet and Virtualization

Internet growth:

The cloud computing architecture was made possible by the internet's widespread adoption in
the 1990s. The introduction of high-speed networks made the idea of centralized, remote
services more feasible by enabling remote access to computer resources.

Virtualization:

Founded in 1998, VMware brought virtual machines (VMs) to the computing world, enabling
multiple operating systems to run on a single physical server. This strategy increased resource
utilisation, efficiency, and flexibility because multiple programmes could run in different
environments on the same hardware.

The emergence of cloud computing in the early 2000s

Web 2.0:

Because of its interactive and user-generated content, Web 2.0 required scalable and flexible
infrastructure. The rising ubiquity of APIs and web services allowed for seamless online
application interaction.

Amazon Web Services:

Elastic Compute Cloud (EC2), which provided computing power on demand, and Simple
Storage Service (S3), which provided scalable storage, were among the services that Amazon
offered when it first debuted AWS in 2006. Businesses can rent pay-as-you-go computer
resources from Amazon, which reduces the expense and complexity of managing IT
infrastructure.

2010s: Growing and Adapting

Principal Entities:
The market for cloud computing expanded with the introduction of major companies like
Google (Google Cloud Platform) and Microsoft (Azure). Along with computers, each
provider offered a variety of services like machine learning, storage, and big data analytics.

Models of Services: SaaS, PaaS, and IaaS are the three main categories into which cloud
services fall.

Software as a service, or SaaS, uses a subscription model to distribute software programs via
the internet. Examples include Google Workspace (formerly G Suite), Salesforce, and
Microsoft Office 365, which allow users to use apps without worrying about the underlying
infrastructure.

Platform as a Service, or PaaS, offers a middleware and infrastructure (development

36

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

frameworks, databases) platform that supports the entire application lifecycle. Examples of
services that relieve developers of the infrastructure management burden are Microsoft Azure
App Service and Google App Engine.

Infrastructure as a service refers to the provision of essential computing resources such as

networks, storage, and virtual machines. Examples of essential components for IT
infrastructures are Microsoft Azure Virtual Machine, Google Compute Engine, and Amazon
Web Services.

The 2020s and Modern Cloud Computing

Hybrid and Multiple Clouds:

Organizations are increasingly utilizing hybrid cloud strategies—which blend private and
public clouds—and multi-cloud strategies—which employ multiple cloud providers—to
improve resilience, avoid vendor lock-in, and cut costs. By employing this technique,
businesses can leverage the best features of different cloud infrastructures.

Advanced Processing

In order to reduce latency and bandwidth usage, processing data at the edge, or closer to the
point of origination, is becoming more and more important as Internet of Things (IoT)
devices become more widespread. Edge computing, which provides processing and data
storage at the edge of the network, satisfies these needs. This is necessary for applications
like driverless automobiles, smart cities, and real-time analytics. (Forgeeks Ahead, n.d.)

Prospective Patterns

Computing in Quantum:

Combining cloud services and quantum computing could completely change our capacity to
address challenging computational issues.

Combining 5G with IoT:

Cloud computing and 5G networks will make it possible for Internet of Things (IoT) devices
to interact more rapidly and consistently, which will promote innovation in a variety of
industries.

Additional Automation and AI:

As automation, machine learning, and artificial intelligence continue to advance, cloud

services will get even better, providing more complex and independent solutions.

The steady stream of innovation that gave rise to cloud computing was spurred by the need
for more efficient, scalable, and flexible computing resources. As technology advances, cloud
computing will become more prevalent, creating new opportunities and altering the way
businesses operate and deliver value.

37

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

ACTIVITY 02

Define an appropriate deployment model for the retail group by

comparing different cloud service models. Demonstrate the chosen
deployment model with real-world examples and justify the tools chosen
to realize the proposed cloud computing solutions.

What is Cloud Development Model

It describes a configuration of discrete environment variables like as ownership, storage

capacity, and distribution framework accessibility. Based on where they are located and who
is in charge of the infrastructure, cloud deployment models can be divided into different
groups. With a choice of deployment models based on who manages the infrastructure and
how much data you wish to retain, it functions as your virtual computing environment. It's
critical to understand and identify the cloud deployment model type that best fits your
business needs and goals in order to fully utilize its possibilities.

38

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Define an appropriate deployment model for the retail group by comparing

different cloud service models

1) Public cloud

Qualities:

Shared Resources: A few resources are shared by multiple tenants.

Cost Efficiency: Generally speaking, expenses are cheaper because shared infrastructure is
used
Extremely scalable to handle a variety of loads.
Maintenance: Managed by the cloud service provider

Public Cloud Computing's Advantages

Major Cost Reductions: Take advantage of a pay-as-you-go arrangement, which spares you
from large upfront costs. ideal for companies looking for quick access to resources.

Easy Infrastructure: Make use of the public cloud without requiring an internal management
team.

Limitless Scalability: There are seldom any storage or bandwidth restrictions in data centers,
and they can be expanded to meet customer needs.

Innovative Technology: Keep up with the newest technological developments as public

clouds continuously include cutting-edge technologies.

Command Over Control: Use a private infrastructure that is under your organization's control
to protect sensitive assets or low-latency workloads.

Easy Transition: For a hassle-free transition, embrace cloud migration gradually and phase in
workloads over time.

39

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Uses of public cloud

1) Storage

Businesses that use public cloud storage, which includes storage capacity and technology as-
a-service, can reduce or eliminate the capital expenses related to creating and maintaining
internal storage capabilities. By distributing the same company data over multiple servers,
cloud storage offers the redundancy needed to support business continuity in the event of a
natural disaster, an outage, or other emergencies.

2) Allocating resources dynamically

Companies can adjust their resource levels based on their demands by using a public cloud.
For example, a public cloud can let an e-commerce firm with highly seasonal sales swiftly
grow its online services. They can scale back during ordinary sales times and simply pay for
additional capacity during peak periods.

3) Creation and evaluation

Developing and testing new apps in a public cloud environment is more convenient than
using the more expensive and time-consuming waterfall process. For example, developers
can set up testing environments on public cloud-based virtual machines (VMs) in a matter of
minutes. Developers can quickly pull down testing environments after they've finished
utilizing them.

4) Low-level programming

A graphical user interface with drag-and-drop functionality that facilitates the automation of
the development process characterizes low code, a visual approach to software. Low-code
platforms enable "citizen" developers—users without much formal coding experience—to
construct apps more easily. Businesses may expedite the construction of websites and
mobile apps, integrate external plugins, and leverage cloud-based next-generation
technologies like artificial intelligence (AI) and machine learning (ML) by utilizing low
code, which also helps to streamline operations.

40

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

2) Private Cloud

Features:

Resources that are devoted to a particular organization are called dedicated resources.
Greater Cost: Because of the specialized infrastructure, it is typically more costly.
Enhanced Security: More command over compliance and security.
Extremely adaptable to individual requirements.

Advantages of Private Cloud

Data Privacy: It is perfect for keeping company data so that only individuals with permission
may access it.

Security: More security and improved access can be achieved by dividing up resources within
the same infrastructure.

Supports Legacy Systems: If your legacy system is unable to connect to the public cloud, this
model can help.

Total Control: Users of private cloud solutions have total authority over choices on software
and hardware.

Personalization: Take advantage of the liberty to alter hardware and software according to
your inclinations in private cloud configurations.

Assurance of Compliance: Private clouds become an option for companies looking for a
simple way, or perhaps the only one, to meet their regulatory compliance requirements.

41

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Uses of private cloud

1) Requirements for compliance and data privacy

Private clouds are great settings for firms who are concerned about data privacy, compliance,
or regulations because of their restricted access. For example, the HIPAA Privacy Rule, a
federal legislation requiring the development of national standards to prevent the disclosure
of sensitive patient health information, must be followed by all US healthcare organizations.
Healthcare companies can use physical and administrative safeguards in conjunction with a
private cloud to store and protect protected health information (PHI).

2) personal cloud storage

Businesses such as financial institutions can safeguard confidential information and manage
who has access to it by using private cloud storage. For example, client data can only be
accessed through a virtual private network (VPN) or other private connection by authorized
administrators or team members.

3) Modernization of applications

Private clouds are often used by businesses to update their legacy apps as part of their
application modernization process. A seamless and secure cloud migration can be achieved
by tailoring private clouds to manage critical workloads.

4) hybrid multicloud approach

A hybrid multicloud infrastructure—which allows enterprises the flexibility and power to

select the ideal cloud environment for each workload—must include private clouds. Using a
hybrid cloud strategy, for example, a bank can utilize a public cloud to develop and test new
apps, such as a loyalty program for its mobile platform, and a private cloud to keep sensitive
client data.

5) cutting-edge computing

By using a decentralized strategy, edge computing moves processing and storage closer to
the point of data creation. For example, IoT and other edge devices can be used by
healthcare institutions to do remote patient monitoring. At the edge, private cloud
infrastructure can be set up, allowing for the local processing of sensitive data. Healthcare
professionals may now follow patient privacy regulations while making data-driven choices
in real time.

42

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

3) Hybrid Cloud

Features:

Combination of Private and Public Clouds: Applications and data are transferable between
private and public clouds.
A balanced strategy that combines the advantages of private and public clouds.
Flexible Workloads: Non-sensitive data can take advantage of the public cloud's scalability,
while sensitive data can remain on the private cloud.

Advantages of Hybrid Cloud

Cost-Effectiveness: Since the public cloud mostly uses it to store data, it is an inexpensive
method.

Security: Because the data is sufficiently divided, there is a far lower likelihood of data theft
by malicious parties.

Flexibility: Companies that have more flexibility are able to design unique solutions that
precisely meet their needs.

Control: With a hybrid cloud solution, you can continue to run your private cloud or on-
premises network.

Speed: Workloads may be moved and managed between cloud environments with ease
thanks to this cloud deployment methodology.

This flexibility lets you customize settings to meet your own business requirements.

43

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Uses of Hybrid cloud

Hybrid clouds are preferred by organizations for many different reasons. Some plan to
gradually shift computer workloads to one or, more likely, several public cloud providers,
with the intention of making the combination of on-premises and cloud resources transitory.
The objective is to gradually remove their on-premises data centers completely.

Some businesses intend to maintain a hybrid cloud environment indefinitely. One major
cause is worries regarding control regulations and data residency requirements. While some
businesses feel at ease storing the majority of their databases and apps in the public cloud,
others may be required by law or corporate policy to retain specific types of data on-site, such
as customer or product development information.

Additionally, some organizations may believe that certain apps are best retained on-site.
Many programs, like those for human resources, ERP, and CRM, may be moved to SaaS;
nevertheless, there are frequently specialized or custom legacy apps that are left on-premises
and need to interface with cloud systems.

Another reason why businesses choose hybrid clouds is bandwidth problems. Keeping the
system on-site makes sense if they have a workload or application that is especially sensitive
to latency and their operations aren't situated near enough to a cloud data center to eliminate
that lag.

44

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Compare different service models

INSTRASRUCTURE AS A SERVICE ( IAAS )

Features:

Fundamental Building Blocks: Provides virtualized computer resources online.

User Control: Networking, storage, operating systems, and applications are all configured by
users.

Scalability: The capacity to adjust greatly, including the allocation of resources.

Google Cloud Platform (GCP), Microsoft Azure, and Amazon Web Services (AWS) are a
few examples.

Benefices of IAAS

Increased availability: An organization may quickly set up redundant servers with IaaS, even
locating them in other regions to guarantee availability in the event of a local power loss or
natural disaster.

Reduced latency, enhanced performance: IaaS clients can place apps and services closer to
users in order to reduce latency and optimize performance, as IaaS providers usually run data
centers across different geographic locations.

Enhanced responsiveness: Clients can swiftly test new concepts, provide resources in a
couple of minutes, and distribute new concepts to a larger user base.

Comprehensive security: Organizations can frequently benefit from more advanced security
and protection they might offer if they hosted the cloud infrastructure in-house by utilizing
encryption, a high level of security locally, at data centers, and elsewhere.

Using by

This type of cloud computing solution is perfect for businesses that create and maintain their
own IT infrastructure. They do, however, desire the freedom to modify their infrastructure to
suit their requirements.

45

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

PLATFOLM AS A SERVICE ( PAAS )

Features:

Managed Platform: Offers a platform so users may create, execute, and maintain applications
without having to worry about the supporting infrastructure.

Tools and services for developing, testing, and deploying applications are included in the
category of development tools.

Automated Management: The provider handles middleware and underlying infrastructure.

Benefits of PAAS

Faster speed to market: Instead of taking weeks or months to set up, development teams can
now spin up development, testing, and production environments in a matter of minutes thanks
to PaaS.

Adoption of new technologies and testing with low to no risk: PaaS platforms usually grant
access to a multitude of the newest resources both up and down the application stack. As a
result, businesses can test new operating systems, programming languages, and other tools
without having to invest a significant amount of money in them or the infrastructure needed
to operate them.

Simplified collaboration: Platform as a Service (PaaS) is a cloud-based solution that offers

development and operations teams access to a shared software development environment and
all the necessary tools from any location with an Internet connection.

Using by

For organizations who require assistance in retaining control over their business application,
it is perfect. Nonetheless, they want to be free from limitations in order to control the
software and hardware environments.

46

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

SOFTWARE AS A SERVICE ( SAAS )

Features:

Full Apps: Provides internet-based applications that are entirely operational.

Under the provider's management, data, application software, middleware, and infrastructure
are all under their control.

Accessibility: Any device with an internet connection can access applications.

Benefits of SAAS

Minimal risk: A lot of SaaS products allow users to test the program for free or at a minimal
monthly cost to see if it meets their needs. This way, there is little to no financial risk
involved.

Productivity at any time or location: SaaS programs can be used on any device that has a
browser and an internet connection.

Simple scalability: Customers can purchase additional data storage for a little fee. Adding
users is as easy as registering and paying for extra seats.

Using by

Sixty percent of cloud solution revenues come from the SaaS model. Therefore, most
companies find it appropriate and preferable.

47

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Demonstrate the chosen deployment model with real-world examples and

justify the tools chosen to realize the proposed cloud computing solutions.

Cloud Computing Solutions Implementation for Retail Businesses

Context

With several million customers and numerous stores across the country, the retail firm
specializes on clothing, electronics, and home goods. The company wishes to expand its
operations and improve its IT infrastructure to meet growing business needs. globally
scattered retail business that specializes in clothes, electronics, and home products. The
paper examines the present IT infrastructure, suggests cloud solutions that support the
company's expansion objectives, and describes the technical expertise required to develop
and implement these solutions.

The group requires experience in the following cloud computing domains:

Cloud Platforms: A solid grasp of the main cloud platforms, including Microsoft Azure,
Amazon Web Services (AWS), and Google Cloud Platform (GCP), is required.

Cloud services: Understanding the notions of Infrastructure as a Service (IaaS), Software as a

Service (SaaS), and Platform as a Service (PaaS) is essential.

Cloud Security: Understanding how to use data encryption, access restrictions, and
compliance rules to secure cloud settings is essential.

Network & Storage: It's necessary to understand cloud networking concepts, virtual private
clouds (VPCs), and available cloud storage solutions.

It is highly desirable to have proficiency in cloud monitoring and management, including cost
control and performance enhancement.

48

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

An on-site examination is necessary to thoroughly understand the existing IT infrastructure.

Hardware and Software: Enumerate the applications, operating systems, and server
configurations that the corporate office and its branches now utilize.

Scalability constraints: Evaluate if the existing infrastructure can be expanded to

accommodate projected future growth.

Data management: Consider data backup techniques, data recovery methods, and data storage
choices.

Security Protocols: Evaluate the security measures in place and identify any vulnerabilities.

Ideas for Cloud-Based Solutions

Deployment strategy: Given the heterogeneous and widely distributed clientele, a hybrid
cloud deployment strategy is recommended. This combines the flexibility and scalability
benefits of on-premise infrastructure with public cloud services.

Public Cloud: Services like IaaS from AWS, Azure, or GCP can be used to host applications
that have high scalability needs, such analytics tools, marketing campaigns, and e-commerce
platforms.

Private Cloud: Sensitive information and necessary business operations can still be carried
out locally for more security and control.

49

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Justification for the Deployment Model Selection:

Scalability: Public clouds enable simple resource scaling up and down to satisfy changing
client needs during peak seasons or sales events.

Cost-Effectiveness: Utilizing the public cloud reduces operational expenses by enabling the
shutdown of underutilized resources, as opposed to maintaining an internal infrastructure.

Disaster Recovery: Public clouds come equipped with redundancy and disaster recovery
features that provide company continuity in the case of an outage.

Security: A hybrid approach preserves the on-site security of critical data and apps by
leveraging the public cloud for scalability and flexibility.

Real Time Examples

Netflix:

Netflix employs a hybrid cloud architecture, utilizing private cloud infrastructure for some
workloads and sensitive data and public cloud services like AWS for hosting its streaming
platform. As a result, Netflix can quickly expand its services in the public cloud and keep
control over important data in the private cloud.

Airbnb:

For its customer-facing platforms and apps, Airbnb uses public cloud services from AWS and
Google Cloud, implementing a hybrid cloud strategy. In order to maintain compliance and
security standards, it also uses private cloud infrastructure for internal tools and data
management.

50

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Justification for Tool Selection

Public cloud providers

including Google Cloud, AWS, and Azure, offer workload management that requires rapid
expansion or dynamic resource allocation scalability, cost-effectiveness, and flexibility. They
provide a wide range of services, including virtual servers, storage, databases, and machine
learning capabilities, that are simple to integrate into hybrid cloud systems.

Private Cloud Solutions

The benefits of control, security, and compliance are the reasons behind the use of private
cloud technologies like VMware and OpenStack. Using solutions like OpenStack or VMware
platforms, which provide them control over sensitive data and apps, organizations can create
a private cloud environment inside their data centers. These technologies offer features like
self-service provisioning, automation, and multi-tenancy support that are essential for hybrid
cloud implementations.

Cloud Management Platform

Resource management in public and private cloud environments requires the use of cloud
management tools like Right Scale and Cloud Health. Businesses may make the most of
cloud deployments with their assistance by receiving information on costs, features, and
security from cloud providers. The cost management, governance, automation, and
monitoring capabilities offered by solutions like Right Scale and Cloud Health are very
helpful in hybrid cloud scenarios.

51

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

ACTIVITY 03

Configure a cloud computing platform using a cloud service provider's

framework and implement a cloud platform using open-source tools for
the retail group. Critically discuss the issues and constraints that you
faced during the implementation of the cloud computing platform and
how those issues could be effectively overcome.

Configure a cloud computing platform using a cloud service provider's framework

CREATING A VIRTUAL MACHINE IN AWS

First we must do go to AWS page

52

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Second click Create an AWS Account and sign up for AWS and Root email address and the
AWS Account name

Next Confirm your Email with the code send to your Email

53

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Next Create your Password and Confirm it

Next give your contact details for AWS

54

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Next add your Credit or Debit card details for the AWS

After that confirm your identity for AWS

55

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

After that verify the identity code sent to your given number by AWS

After that you will done with the account set up

56

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Then sign in to the console

Next go to Services and find EC2 and open it and click launch and instance

57

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Next give name and tags

Next in the quick start click the OS you want

58

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Set up the Key pair ( log in )

Next set up the network settings and allow the HTTPS traffic from the internet

59

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Configure the storage

And next launch the instance

60

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Download the remote desktop file

61

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Next Decrypt the Password and get it

After that connect

62

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Paste the password here

63

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

After press ok the virtual machine will be created

64

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Implement a cloud platform using open-source tools

Used VM WORKSTATION

Firstly Set up the personalized linux

65

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Next it was ready to create the virtual machine

66

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

67

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

68

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

69

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

70

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

71

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

72

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

73

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

74

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

75

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

And these are the cording’s to the own cloud

First go to the ubuntu terminal

76

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

77

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Then go to the Command prompt

78

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

79

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

80

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

81

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

82

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Critically discuss the issues and constraints that you faced during the
implementation of the cloud computing platform and how those issues
could be effectively overcome.

While using the AWS we get some Issues

When I initially started using AWS and virtual machines (VMs), I had no concept what cloud
computing was about or how to use the AWS Management Console. Despite my initial fear, I
approached learning piecemeal.

Understanding Amazon EC2 (Elastic Compute Cloud), AWS's cloud virtual server service,
was my primary objective at first. Among the abilities I developed were starting EC2
instances, choosing instance types based on memory and processing requirements, and
configuring security groups to control traffic.

Verification Delays: I need to provide proof of identity, such as a working phone number and
payment method, in order to utilize AWS. If there are issues with phone verification or credit
card confirmation, the process can take longer.

83

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Issues with Payment Methods: I get functional credit or debit card in order to create an
account with AWS. If there are issues with the card (such as blocked transactions, insufficient
money, or international cards), the account creation process might not succeed.

Email issues: I need to use a separate email address that isn't connected to another Amazon
account. If the email you're using is already in use or has an issue, you'll need to choose
another one.
After my first EC2 instance ran successfully and I created an AWS account, I created a key
pair to protect access. However, first, I couldn't remember how to utilize the key pair to
unlock the password for the instance. It was a little annoying, but I kept going despite it.

How I Managed these situations

For the verifications errors I did Verify that my payment method and phone number are
available before starting the account setup process. Select a phone number that can receive
SMS messages or voice calls for verification

For the issue of the payment methods I did Use a credit or debit card that can be used to
make transactions overseas if applicable. Make sure the card has enough money on it and is
not getting close to its credit limit. If the issues persist, get in contact with your bank to
make sure the card isn't blocked.

To the email issue I did Use a different email address that you haven't used to sign up for
any other AWS accounts. Verify that everything is correct before submitting. If you have no
choice but to use the same email address, consider using aliases.

Cracking the Password: Initially, I couldn't get in since I couldn't remember how to crack
the password for the instance.
I studied the AWS documentation and watched training videos to have a better

84

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

understanding of the process.

I navigated to the EC2 Dashboard, selected my running instance, and clicked "Connect." I
choose to use the Windows instance RDP client in this instance.
There was a "Get Password" option. I selected this and sent in my file including [Link]
private key to decode the Amazon password.

Issues I get while using the VM Workstation

Problems with the Installation Media

I get that the installation's ISO file is damaged or incomplete.

If the installation ISO file is corrupted or incomplete, a defective or incompletely downloaded

file used to install Ubuntu may cause installation problems or failures. File corruption, issues
with the storage medium, or interruptions in the download procedure could all lead to this.
This could cause the ISO to malfunction, which could result in problems like installation
errors or the inability to boot from the file. The best approaches to fix this are to redownload
the ISO from a reliable source, use checksums to verify the integrity of the file, and make
sure the file is burned or written to the installation media appropriately.

VM Configuration Problem

I get the Installation issues may result from insufficient memory or CPU allocation in the
virtual machine settings.
A VM setup problem occurs when the virtual machine (VM) specs, such as RAM, CPU, or
disk settings, do not meet the requirements of the operating system that is being installed.
Many issues, like unstable virtual machines (VMs), subpar performance, or failed
installations, could arise from this improper setup. Make that the virtual machine's hardware
specs, such as RAM allocation, CPU core count, and disk space, meet or exceed the operating
system's minimum requirements for a successful installation and optimal performance. A
virtual machine (VM) that is set up correctly helps to ensure error-free operation

85

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Graphics and Display Issue

The display might be blank or at a low resolution during or after installation.

Issues such as a distorted display, low quality, or blank screen occur when the virtual
machine (VM) cannot properly output visual elements. We refer to these as display and
graphics problems. Many times, these issues are the result of inadequate or missing drivers,
particularly when VMware Tools, which enhances display capabilities and optimizes
graphics drivers, is not installed or configured. To resolve these problems, the virtual
machine (VM) has to have the VMware Tools installed inside of it after the operating system
has been installed. Additionally, by adjusting the display settings within the virtual machine
(VM) and ensuring that the virtual graphics adapter is configured correctly, you can improve
visual performance and resolve display-related issues.

How I managed these situations

I Verify the integrity of the ISO file by comparing its checksum (MD5, SHA1, SHA256) with
the official Ubuntu checksums available on the Ubuntu website. Download the ISO file again
if necessary.

I Confirm that the virtual machine meets Ubuntu's minimum system requirements. Amount
RAM and CPU power appropriately (i.e., 2 GB or more) for the Ubuntu version I am
installing.

I Install VMware Tools after the completion of the Ubuntu installation. It provides optimized
drivers for enhanced graphic performance and display.
Network Connectivity Issues

86

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Performance and Scalability Issues

Scalability and performance concerns must be minimized by cloud platform developers. The
following are significant barriers and restrictions that developers might encounter:

Resource management and load balancing:

In distributed systems with several instances, it may be challenging to distribute resources

and manage increasing workloads. In order to attain optimal distribution and utilisation,
developers must integrate efficient resource management techniques, load balancing
algorithms, and resource monitoring systems

Scalability of Data Management and Storage:

It gets harder to manage and scale data storage efficiently as user bases and data volumes
rise. Data consistency, sharding, replication, and partitioning are problems that developers
must address. Scalable data storage techniques including distributed file systems, object
storage systems, and NoSQL databases must be used.

It is challenging to implement both vertical and horizontal scalability, which entails

increasing the resources of individual instances and adding more instances. The cloud
platform's architecture and componentry must allow for seamless scalability without
compromising effectiveness. Efficient scaling solutions, such microservices, containerization,
or auto-scaling, are necessary for variable workloads.

Problems with the network and communication:

Restrictions related to networks or communication can hinder scalability. Issues including

excessive network latency, insufficient bandwidth, or insufficient component communication
might affect performance. Developers must optimize data transfer, lower network overhead,

87

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

and consider for regional dispersion in addition to creating efficient communication

protocols.

Assess and Model Real-World situations:

Extensive load and stress testing that mimics real-world situations is necessary to test
scalability and performance. Developers require load testing tools, comprehensive test
procedures, and performance data analysis to identify constraints in the system and enhance
performance.

Dynamic Workload Management:

It might be challenging to handle erratic and dynamic workloads on cloud systems.

Developers need to use adaptive workload management technologies like auto-scaling,
intelligent request routing, or dynamic resource allocation if they want to handle changing
workloads effectively.

88

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Challenges with Security and Privacy

As a cloud platform is developed, security and privacy continue to be the top concerns.
Important issues and limitations that programmers may encounter are as follows:

Data Protection and Encryption:

To ensure data privacy and confidentiality, developers must employ robust encryption for
both data in transit and data at rest. Industry-standard encryption techniques, proper key
management, and the usage of secure communication protocols like TLS/SSL are necessary
for this.

Access control and authentication:

To stop unauthorized access, strong authentication methods like multi-factor authentication

(MFA) and the use of role-based access control (RBAC) or attribute-based access control
(ABAC) are needed. Safe user and administrator authentication procedures are necessary to
preserve the security and integrity of the platform.

Patching and Vulnerability Management:

Proactively patching the cloud platform and managing vulnerabilities are critical to lowering
security risks. Regular code analysis, abiding by security advisories, and expeditiously
implementing security updates are all components of a robust vulnerability management plan.

Techniques for Safe Coding and Development:

These methods assist in preventing common security flaws such as cross-site scripting (XSS)
and SQL injection. They also assist in upholding safe coding practices throughout the
development process and standards like the OWASP Top Ten.

89

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Challenges of Time and Resource Constraints

Running out of time and resources is one of the most common issues that arises during the
development process. The following are the principal challenges and limitations that could
arise:

Project Deadlines:

It may be challenging to finish a project by the deadline, particularly if unanticipated issues

arise. Time management can be aided by effective project planning, consistent progress
reporting, and resource or priority adjustments.

Priorities that conflict:

It can be difficult to strike a balance between the needs of multiple projects and stakeholders,
which could lead to conflicting priorities. Setting priorities, ensuring efficient use of
resources, and managing conflicting objectives all call for agile approaches and open
communication.

Training and Skill Gaps:

Inadequate training among the development team members could result in poor work or
delays. These challenges can be overcome by identifying skill gaps early on, providing
opportunities for training, promoting information sharing, and bringing in outside experts.

Ineffective Collaboration and Communication:

The process of growth may be impeded by ineffective collaboration and communication. By

utilizing collaborative technologies, establishing efficient communication channels, and
promoting an open communication culture, these limitations may be overcome.

Technical Debt:

As a result of time and resource constraints, technical debt can accrue and require more work.
Focusing on sustainable development methods, reorganizing projects, planning frequent code
reviews, and finding a balance between deadlines and quality are some ways to manage
technical debt.

90

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Difficulties in Cost Management

Even if there could be a lot of challenges and limitations, cost control is a crucial step in the
expansion process. Here are some key items to remember:

Budget Restriction:

Funds for development efforts are sometimes constrained, requiring organizations to operate
within set budgetary constraints. Good cost management is crucial to ensuring the project
meets its objectives and stays within budget.

Infrastructure Costs:

Setting up a cloud platform may lead to expensive server, storage, networking, and software
licensing fees. Managing infrastructure costs includes infrastructure-as-code methods, cost-
effective cloud services, and optimisation of usage.

Software and licensing fees:

Because of licensing fees, controlling expenses for proprietary software or third-party

solutions may be challenging. Effective management includes evaluating open-source
alternatives, drafting licence agreements, and keeping an eye on compliance.

Development costs:

A sizeable portion should go into costs associated with human resources, like pay, benefits,
and training. Efficient cost management include people level optimization, team productivity
management, and optimal resource allocation.

91

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Development Tools and Technologies:

The budget as a whole is impacted by costs associated with frameworks, technologies, and
development tools. Cutting expenses can be accomplished by utilizing open-source tools,
comparing less expensive solutions, and utilizing all of the technology that is already
accessible.

Testing and Quality Assurance Fees:

Adding extensive testing and quality assurance to your project may increase its cost. Test
automation and cloud-based services are examples of cost-effective testing options that allow
you to control testing expenses without compromising quality.

Examine critically how problems and limitations that arise during the
development process can be resolved.

In AWS

Resource Management Issue:

Properly managing AWS resources may be challenging because to the potential for cost
overruns and wasteful resource utilization.

Resolution:

Use AWS Cost Management tools, such as AWS Budgets and Cost Explorer, to monitor and
control expenditure. Use auto-scaling to dynamically adjust resources in response to demand.
Use savings programs or reserved instances to reduce long-term costs. Make regular
assessments and enhancements to resource allocation by utilizing AWS Trusted Advisor.

92

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Technical Challenges

Problem:

Technical issues like as integration issues, service limitations, or performance bottlenecks

may affect development.

Resolution:

Utilize AWS's extensive documentation and support resources. Use AWS support plans to
seek technical assistance, and contact AWS Professional Services as necessary. To assign
operational challenges, use AWS managed services and scalable architecture best practices.

I was at a strange place when I first started using AWS. Having never utilized a cloud
platform previously, I was lost in the AWS Management Console. A significant obstacle was
this early ignorance. To overcome this, I employed a methodical approach to learning. I
started by going over AWS's extensive documentation, which helped me get a basic
understanding of the various services. Online tutorials and video lectures were very beneficial
because they included thorough explanations and practical examples. By focusing on core
services like EC2 for virtual machines, S3 for storage, and IAM for access management, I
built a solid foundation. Experience in the real world was crucial. I established test instances,
configured storage buckets, and changed user privileges.
With each new thing I learned about the AWS environment, my confidence grew. I was able
to advance from being an inexperienced user to a proficient user who could effectively use
AWS resources by using a comprehensive learning strategy.

93

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Scope creep:

Changing the scope of a project can lead to increased costs and longer completion times,
particularly in a cloud environment.

Solution:

Immediately establish the project's objectives and scope in detail. Use Terraform or AWS
CloudFormation for infrastructure as code management to make resource and configuration
changes more quickly. Make use of AWS's scalability to expand and alter services as
required, and apply agile concepts to progressively adapt to scope changes.

Handling of Crucial Pairs

After creating a key pair and launching an EC2 instance without any issues, I encountered an
issue that underscored the need of key management. I couldn't recall how to decrypt the
instance password, thus I was unable to log into the virtual computer. I needed to know the
encrypted password in order to enter my instance, thus this was an important step. To fix this,
I used the online resources and the AWS documentation. Finding out that I needed to choose
my instance on the EC2 Dashboard, click on the "Get Password" button, and that was it. Here
is where I may upload my private key file (.pem) for password decryption. I wasn't sure how
to go at first, but with some persistence and careful investigation, I managed to decode
the password to get into my virtual computer.

How important it is to understand access controls and keep key pairs in a safe place. It also
demonstrated to me how crucial it is to know every step of the access process in order to
monitor and address crucial management issues in the future.

94

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

In VM workstation

Resource Allocation Issue:

Inadequate allocation of resources such as CPU, memory, or disk space can lead to unstable
or poor performing virtual machines (VMs).

Resolution:

Ensure that virtual machines (VMs) have enough resources configured to meet the
requirements of the operating system and any running applications. In the VMware
Workstation setup options, change the RAM and CPU allocation parameters. Monitor virtual
machine performance and change resources as needed to prevent bottlenecks.

Issues with Interoperability

Issue:

There can be incompatibilities between the host system and the virtual machine, or between
the guest OS and VMware Workstation versions.

Result:

Verify that the most recent patches and updates are installed on the guest operating system
and VMware Workstation. Consult VMware's compatibility documents to confirm that the
configurations of your host system and virtual machines are supported. Use VMware's tools
to update and upgrade the VMware Tools inside the virtual machine to increase compatibility
and performance.

95

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Networking Issues:

Development may be hampered by problems with network connectivity within the virtual
machine (VM), especially when trying to access resources or services.

Resolution:

To properly setup your network settings, select the appropriate network adapter mode (NAT,
Bridged, or Host-only) based on your needs. Check the virtual machine's operating system
and the network setup in VMware Workstation. To troubleshoot network issues, try restarting
network services, verifying virtual machine network parameters, and testing connectivity.

One significant issue I ran into was a virtual machine's (VM) continued presence on the EC2
Dashboard even after I attempted to terminate it. The fact that the virtual machine (VM)
appeared to remain running even after the termination instructions were correctly executed
was concerning and frustrating. I was worried about wasting unnecessary money and
allocating resources. I took a close look at this, checking through AWS documentation and
community forums. I discovered that the termination process could take longer than
anticipated if there are issues with the AWS backend. Armed with this knowledge, I adopted
a patient attitude. I waited a few minutes after each attempt at termination before refreshing
the dashboard to verify sure the modifications were applied.

Storage and Disk Issue Management:

Inadequate disk space or disk performance issues might affect data management and virtual
machine performance.

Solution:

Provide enough disk space for each virtual machine based on projected consumption.
VMware Workstation has functionality for managing and resizing virtual drives. Monitor
disk utilization and performance, and consider using technologies like thin provisioning to
maximize storage space.

96

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Solutions to issues that arose when creating an open-source cloud platform

Benefits of implementing a cloud platform with open source technologies include cost-
effectiveness, flexibility, and adaptability. However, there can be a lot of challenges and
limitations when putting it into practice. Let's examine some of these issues and potential
solutions.

Overcoming the Absence of Vendor Support on the Open Source Cloud Platform:

• Internal Knowledge: Put together a team that is knowledgeable about the inner workings of
the open-source software being utilized.
• Hire seasoned professionals or enhance the skills of present team members with training
courses and certifications.
• A well-informed staff actively engages in the open-source community and is essential to
troubleshooting.

Engage with the Open Source Community:

• Take an active part in development groups, email lists, and open-source community forums.
• Benefit from knowledge sharing and assistance with developers and other users.
• Build a strong rapport with the community by sharing code, pointing out mistakes, and
making suggestions.

Professional Assistance Services:

• Despite the absence of official vendor assistance, use independent open-source software-
focused businesses or service providers.
• Have access to expert support services, including guidance, teaching, and problem-solving
assistance.

97

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Assistance under Contract:

• Clearly describe the assistance level, issue resolution procedures, and response times.
• Establish service-level agreements (SLAs) with outside vendors for certain open-source
products. This approach, however costly, ensures a safety net and timely support for urgent
problems.

Active Monitoring and Upkeep:

In order to proactively identify and address issues, implement a comprehensive strategy for
monitoring and maintenance.
• Monitor project and community channels for updates, bug reports, and security alerts so that
you can respond promptly to any potential problems.
• Regularly upgrade open-source tools to the most latest versions and security patches.

Increase the Size of Your Toolkit:

• Pay close attention to compatibility and integration concerns when utilizing different tools.
• Add more open-source technology to broaden the toolbox and offer flexibility and
opportunities.
• Try not to depend too much on a single open-source application in order to lessen the
likelihood of vendor assistance being unavailable.

98

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Overcoming Integration Difficulties in the Implementation of Open Source Cloud

Platforms

Thorough Analysis and Compatibility Evaluation:

• Examine discussion boards, case studies, and documentation to anticipate any potential
integration problems in advance.
• Consider elements like as protocols, data formats, APIs, and dependencies.
• Conduct a comprehensive evaluation to determine the compatibility of open-source
products with other cloud platform technologies and elements.

Clearly defined architecture and standards:

• In the well-defined architecture and industry standards of the cloud platform, specify
protocols, data formats, and communication routes.
• To minimize compatibility issues and expedite the integration process, adhere to industry
standard practices.

Original Design or Modification:

• Evaluate how changes will affect community support, maintainability, and compatibility
with upcoming releases.
• In order to guarantee seamless integration, consider developing custom tools or altering
open-source ones.

99

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Observation and Issue Resolution:

• Use technology for error tracking, recording, and monitoring to promptly identify and
resolve integration-related issues.
• Constant observation enables the early identification and fixing of integration problems.

Collaborating with Experts:

Collaborate with consultants or specialists who have experience merging open-source

software with cloud computing systems.
• Leverage their expertise and experience to quicken the learning curve and gain insights into
integration best practices.

Enhancing Security and Compliance on Open Source Cloud

Infrastructures

Comprehensive Security Audits:

Conduct comprehensive security evaluations of open-source technology integrated into cloud

computing platforms.

• Identify vulnerabilities, review security guidelines, and stay current on security update
releases.
• Make advantage of security testing frameworks and tools to identify and resolve security
problems.

100

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Hardening and Secure Configuration:

• Comply with suggested security protocols, disable unnecessary services, enable encryption,
and set up access restrictions.
• To establish a secure configuration, follow hardening guidelines, and adhere to security
requirements specific to open-source technologies.
• Implement safe configurations for all open-source software and cloud platform components.

Continuous Updates and Patching:

• Establish a schedule for updating the cloud platform on a regular basis and ensure that it has
completed comprehensive testing prior to deployment.
• Use a solid change management approach to prevent any disruptions or vulnerabilities
caused by new versions.
• Stay informed about the latest security fixes released by the open-source community.

Implement role-based access control

multi-factor authentication, and the least privilege principle in security and authorization for
access.

• Tightly enforce the cloud platform's access restrictions and authentication requirements.
• Regularly review and audit access credentials to lessen the likelihood of unauthorized
access.

Security Evaluation in Progress:

Collaborate with independent security specialists to carry out objective security evaluations
as needed.
As part of security testing, do regular penetration tests, vulnerability analyses, and code
reviews.

101

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Getting Involved in the Open Source Community:

• Monitor updates and security advisories on open source projects.

• Participate in the open-source community to be informed about best practices, mitigation
techniques, and security vulnerabilities.
• Participate in security-related discussions, report security issues, and share your knowledge
to give back to the community.

102

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Activity 4

Analyze and critically assess the common problems and security issues that are likely to
arise in cloud environments and discuss suitable solutions to overcome these issues.
Critically discuss how an organization should protect their data when migrating to a cloud
solution such as the retail group.

Typical Cloud Computing Problems and Their Solutions

Cloud computing is the real-time, on-demand supply of resources like data and storage. Its
rapidly increasing market value indicates that it is an innovative company in the IT industry.
Due to its ability to save costs, cloud development has shown to be beneficial for both small
and large public and private organizations. More than 94% of businesses are expected to
increase their cloud spending by more than 45%. Furthermore, this has given cloud
developers more high-paying job options.
Noisy technology was flourishing before the epidemic, but during the lockdown, installations
and usage of cloud computing unexpectedly increased. Numerous variables, such as the shift
to online learning, the ubiquity of on-demand streaming services, virtual office meetings
carried out through video conferencing platforms, and virtually held conferences, may be
responsible for the enormous surge. Only cloud computing allows us to accomplish this.
It's safe to assume that the cloud plays a big part in our life these days, regardless of how
reliant on it we are as developers, learners, businesses, or anybody else. But, in light of this
dependence, it's equally important that we take into account the challenges and issues related
to cloud computing.

1. Concerns regarding privacy and security

Data security is a major worry when switching to cloud computing. User or organizational
data saved in the cloud is vital and private. Even though the cloud service provider assures
data integrity, you are still responsible for user authentication and authorization, identity
management, data encryption, and access control. Customers' trust in your apps is steadily
being undermined by identity theft, data breaches, malware infections, and several other
cloud security issues. In addition to potential financial loss, this could harm a person's
reputation and position. Working with cloud computing also requires sending and receiving
large amounts of data rapidly, which increases the risk of data leaks.

103

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Decisions:

To safeguard data both in transit and at rest, use strong encryption techniques. This stops
unauthorized access to the data in the unlikely case that bad actors are able to intercept or
access it.

Granular Identity and Access Management (IAM) controls can be implemented to manage
who has access to cloud resources and data. MFA, or multi-factor authentication, is a helpful
security enhancement solution.

Employ data loss prevention (DLP) tools to detect, locate, and prevent important data from
being uninvited outside of your organization.

2. Problem with Downtime and Service Reliability:

Problem: Unplanned interruptions and downtime can cause services to lose their
dependability and availability.

Resolutions:

Maximum Accessibility (MA):

Systems can be built for high availability by distributing resources over many availability
zones and locations. This redundancy helps ensure that services are provided even in the
event that one zone or area fails.

Balance of loads:

To prevent any one server from becoming a bottleneck or a point of failure, distribute
incoming traffic among numerous servers using load balancers like Nginx or Traefik.

104

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Disaster recovery and backup:

Create comprehensive strategies for both, and test them regularly to ensure that they will
continue to work as intended in an emergency.
Observation and Caution: Monitor system performance and set up alerts for any anomalies or
issues by utilizing tools like Prometheus and Grafana.

3. Difficulties with Regulatory Compliance:

When managing data from many jurisdictions, it can be difficult to comply with regulations
such as GDPR, HIPAA, or PCI-DSS in cloud environments.

Decisions:

Compliance Certifications:

Choose cloud service providers with relevant audit reports and certifications. Many providers
offer compliance capabilities that help companies stay compliant with the law.

Governance and Policy:

To ensure that rules are obeyed, put in place robust governance structures and procedures.
Utilize technology that provides automated compliance checks and audits.
Documentation: Keep detailed records of your compliance initiatives, data handling
procedures, and security measures in order to demonstrate compliance during audits.

105

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

3. Expense Control

Although most cloud service providers offer a "Pay As You Go" approach that reduces the
overall cost of resources used, there are times when a business using cloud computing must
pay hefty fees. When resources are not optimized—for example, when servers are not being
used to their full potential—the hidden costs rise. If there are sudden spikes or overages in
usage, or if the application's performance degrades, the overall cost goes up. The
underutilized resources are among the other main reasons for the rise in costs. If you activate
cloud services or an instance and forget to turn it off over the weekend or when you're not
utilizing the resources, the cost will increase even though you won't be using them.

Resolutions:

Tools for Cost Management and Monitoring:

To keep an eye on your cloud spending and identify areas where you may save costs, make
use of resources like AWS Cost Explorer or Google Cloud's Cost Management. Optimizing
and managing cloud costs can also be facilitated by CloudCustodian and other open-source
programs.

Automatic Scaling:

Use auto-scaling to dynamically adjust resource allocation in response to demand. By

guaranteeing that you only pay for what you use, this reduces waste.

Savings Plans and Reserved Instances:

For predictable workloads, utilize cloud providers' savings plans or reserved instances to
benefit from lower costs than on-demand pricing.

Resource Labeling: Resource labeling enhances cost allocation and tracking by enabling
effective monitoring and management.

106

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

[Link] Error and Repair

Issue:

business continuity may be impacted by data loss brought on by hardware malfunction,

malicious assaults, or inadvertent deletion.

Resolutions:

Frequent Backups:

Make sure you plan regular backups of important data, and keep backup copies in several
places. To guarantee consistency, use the automated backup services offered by cloud
providers.

Prepare and test a disaster recovery strategy that incorporates methods for system recovery
and data restoration. In the event of data loss, promptly resume operations by utilizing cloud-
based disaster recovery solutions.

5. Issues with Execution

One of the most important factors for cloud-based solutions is performance. Poor cloud
performance has the ability to lose clients and lower profits. A small delay in an application's
or website's loading time could result in a large drop in the percentage of users. Ineffective
load balancing, which happens when the server is unable to distribute incoming traffic in a
way that maximizes user experience, could be the cause of this delay. Additional challenges
arise from fault tolerance, which permits operations to proceed as necessary even in the event
that one or more components fail.

107

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Resolutions:

Content delivery networks, or DNSs, are: You may reduce latency and expedite load times
for customers worldwide by leveraging CDNs to cache content closer to end users.
Improve Resource Allocation: Consistently monitor resource utilization and adjust
allocations based on performance metrics to ensure peak performance.

Load testing: Perform regular load testing to identify potential bottlenecks and enhance
system performance. Instruments such as Gatling and JMeter can be used to simulate various
load conditions.

6. Difficulties with Data Management

Cloud computing manages the real-time provision of resources while handling huge amounts
of data flow to and from the servers. The availability of the high-speed network is the only
factor that makes this possible. Even when these data and resources are transported via the
network, there is always a risk when there is a sudden disruption or when bandwidth is
limited. Even if businesses are able to lower their hardware expenses, they still run the danger
of losing out on potential revenue. Rather, they ought to ensure that there are plenty of
internet bandwidth and no network outages. For smaller firms, sustaining network bandwidth
at a high cost is often a major challenge. Maintaining enormous data volumes and ensuring
data security in cloud systems

Data Sharding and Replication:

Utilize data sharding to disperse data among multiple servers and data replication to generate
multiple copies of the same data at various places in order to boost performance and
availability.

Management of Data Lifecycle:

To ensure efficient data management and compliance with legal and regulatory requirements,
establish data lifecycle rules to regulate data archiving, destruction, and retention.
108

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Concerns regarding privacy and security in cloud platform

1. Unauthorized Access:

Problem:

Unwanted parties accessing private information kept on cloud servers.

Resolution: Put in place strong access controls, such as role-based access controls (RBAC),
two-factor authentication, and secure passwords. Control user privileges by implementing
trustworthy identity and access management (IAM) solutions. When transmitting and storing
data, encrypt it. You should also periodically check the access logs for odd activity.

2. Data Breachers

Problem: Sensitive information is frequently exposed in data breaches as a result of malicious

activity or vulnerabilities.
Resolution: Make use of several levels of protection, including firewalls, data loss prevention
(DLP) tools, and intrusion detection and prevention systems (IDS/IPS). Update and patch
operating systems and applications on a regular basis. Perform security audits and penetration
tests often. To ensure privacy and create thorough incident response plans, encrypt your data.

3. Data Loss and Recovery:

Problem: Access to important information is impeded by unintentional data loss or

corruption.
One potential solution could be to implement robust backup and recovery protocols,
periodically perform data backups, and assess the restoration process. To lower the risk of
data loss, take into account multi-region backup or geo-replication. Make use of the
replication, versioning, and snapshot features offered by cloud providers, and make sure your
backups are encrypted to keep out unwanted access.

109

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

4. Data Residency:

The challenge is in making sure data is housed in the right country and complying with data
residency requirements.
Solution: Recognize industry-specific data residency regulations and compliance guidelines.
Choose a cloud service provider that maintains data centers in the nation of your choice. Even
inside the cloud provider's infrastructure, use encryption and access controls to thwart
unwanted access.

5. Cloud Provider Security:

Issue: Making sure industry standards are followed and putting your trust in the cloud
provider's security procedures.
Resolution: When selecting a cloud provider, do your homework and look into privacy
policies, industry compliance (such as ISO 27001), and security certifications. Examine the
data management strategies, incident handling procedures, and security standards offered by
the service. Take into account independent assessments of the supplier's security measures.

Concerns regarding Cost Effectiveness

1. Absence of Cost Visibility:

• Challenge: Complicated pricing methods make it difficult to identify and monitor cloud
expenditures.
• Solution: To improve expense visibility, use cost control tools, resource tagging, set up
notifications, and carry out routine evaluations.

110

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

2. Underutilization of Resources:

The problem is in allocating resources that aren't completely used, which results in wasteful
spending.
• Solution: To find and cut down on unnecessary resources, apply cost optimization
techniques, automation, and auto-scaling tools.

3. Inadequate Architectural Planning:

• Difficulty: Ineffective resource use brought on by shoddy architectures.

• Solution: For best architectural design, use cloud-native services, load balancers, caching
technologies, and frequent resource configuration reviews.
4. Absence of Strategies for Cost Optimization:

• Problem: There are no practical cost-optimization techniques for the cloud.

• Solution: To optimize expenses, create a thorough plan for cost optimization, allocate
resources according to policies, and make use of the capabilities offered by cloud service
providers.

5. Uncontrolled Spending and Shadow IT:

The challenge lies in the lack of governance which results in uncontrolled expenses from
unapproved resource allocation.
• The solution is to create governance tools, put policies into place, limit access using Identity
and Access Management (IAM), teach users how to utilize resources responsibly, and keep
an eye on compliance to prevent unnecessary spending.

111

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Reasons and Fixes for Cloud Platform Performance Problems

Common Issues with Performance:

1. Latency in the network:

The issue at hand is data transmission delays that affect cloud performance.
• Resolution: To mitigate network latency, implement Content Delivery Networks (CDNs),
integrate edge computing, enhance system architecture, and make use of low-latency network
services.

2. Scalability and Allocation of Resources:

• Difficulty: Inadequate scalability resulting in performance snags.

• Solution: To improve scalability and effective resource allocation, use load balancers, use
serverless computing, and put auto-scaling methods into place. You should also constantly
monitor resource usage.

3. Distribution Geographically:

• Difficulty: Serving customers in different places can cause performance concerns.

• Solution: To overcome issues related to geographic distribution, make use of several
geographic locations, put data replication plans into place, make use of CDNs (Content
Delivery Networks), and use sophisticated traffic routing techniques.

4. Performance Evaluation and Enhancement:

• Difficulty: Performance bottlenecks go undetected due to inadequate testing.

• Solution: To improve overall system performance, carry out comprehensive performance
testing, make use of load testing tools, and optimize code, queries, and configurations in light
of test results.

112

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Examine the most prevalent security problems in cloud computing settings.

Numerous unique security threats and challenges are associated with cloud computing. A
third-party service stores data on the cloud, making it available online. This suggests that
control and access to the data are limited. It is also brought up how to sufficiently protect it. It
is imperative that all individuals possess knowledge regarding their obligations and the
security hazards linked to cloud computing. Cloud service companies share worries and risks
about cloud security.
According to this paradigm, the cloud service provider manages cloud security, while the
client is in charge of protecting their data in the cloud. Whether using software-as-a-service
(SaaS) like Microsoft 365 or infrastructure-as-a-service (IaaS) like Amazon Web Services
(AWS), the cloud computing client is always in responsibility of controlling access to and
protecting their data from security threats. One of the main causes of cloud computing
security problems is cloud data security. Most issues arise from the data that users upload to
the cloud, including lost data insight, improper data regulation, and data theft. Skyhigh
Security (undated)

1. Data Breaches:

Unauthorized access to sensitive data is a major security concern. Confidential, financial, or

personal information may be compromised due to insider risks, external attacks, or
configuration mistakes.

Impact: Violating data protection regulations may result in severe financial losses,
reputational damage, and legal ramifications.

Mitigation of harm:

Encryption:
Encrypt data while it's in transit and at rest to stop unauthorized access.

Access Controls: Use MFA and enforce strict IAM policies to restrict who gets access to
sensitive data.

113

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Regular Audits: Perform regular security audits and vulnerability assessments to identify and
address any problems.

2. Improperly Set Up Cloud Resources

Inadvertent exposure of data or services might occur via misconfigured cloud services and
resources. Common misconfigurations include public access to private resources, overly
permissive security groups, and lax IAM restrictions.

Impact: Improper configurations increase the possibility of service outages, data breaches,
and unauthorized access to cloud resources.

Mitigation of harm:

Automated solutions:

Use configuration management and monitoring (such as AWS Config and Azure Security
Center) to automatically identify and correct misconfigurations.

Best Practices: Follow suggested practices and guidelines for cloud security to ensure proper
resource configuration.

Regular Reviews: Audits and reviews of configurations and permissions should be carried out
often.

114

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

3. Perils arising from Insider threats

are characterized as malicious or thoughtless actions carried out by employees,

subcontractors, or other trustworthy individuals. Insiders may intentionally or inadvertently
contaminate data or systems.

Impact: Insider threats have the potential to result in data theft, sabotage, and unauthorized
access to private information.

Mitigation of harm:

It is recommended to implement least-privilege access limits and to periodically review and

adjust permissions.
Monitoring and Logging: Use monitoring tools to keep an eye on user activities and keep an
eye out for suspicious behavior.
Training and Awareness: Educate employees about potential risks and practical security
measures.

Loss of Data

Data loss is one issue with cloud computing. This is also known as data leakage. We are
conscious that we do not have total control over our database and that someone else may have
access to our private information. Therefore, if hackers are able to get beyond the cloud
service's security measures, they could be able to access our sensitive information or private
files.

Interference from hackers and unstable APIs

If we are talking about the cloud and its services, we must be talking about the Internet.
Furthermore, we are aware that the easiest way to communicate with the cloud is through the
use of APIs. For this reason, it is imperative to protect the APIs and interfaces that are used
by external users. On the other hand, certain cloud computing services aren't open to the
general public. Because it's possible for third parties to access these services, they represent

115

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

the weakest portion of cloud computing. Thus, it's possible that hackers would exploit these
platforms to easily access or corrupt our data.

The theft of user accounts

Many people use weak passwords or use the same ones over and over again when it comes to
password security. Because of this problem, several accounts may utilize the same stolen
password, making phishing attempts and data breaches more significant.

One of the biggest threats to cloud security is account hijacking, as businesses rely more and
more on cloud-based apps and infrastructure for critical business functions. When a
customer's login credentials are compromised, the attacker gains complete control over the
customer's online account and is able to access confidential information or employee
credentials. Moreover, businesses often find it more difficult to identify and mitigate these
risks in the cloud than they can with on-premises technology.

Changing Your Service Provider

Vendor lock-in is a serious security risk in cloud computing. Many businesses will encounter
a variety of problems when transferring providers. For example, there are several challenges
that an organization faces when deciding to transition from AWS Cloud to Google Cloud
providers, including the requirement to transfer all of their data and the operational
differences between the two cloud providers. Moreover, it's likely that AWS charges a
different price than Google Cloud, etc.

Denial-of-service (DoS) attacks

This kind of attack could be the result of an overflow of traffic on the system. Attacks using
denial of service (DoS) generally target large institutions, such as banks and government
offices. Data loss occurs as a result of a denial of service attack. As such, managing data
recovery necessitates a large time and money commitment.

116

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Discuss about how to create a secure cloud platform by addressing these

security concerns.

Addressing data loss is a must for developing a secure cloud infrastructure. Data replication
over many geographic sites and automatic, regular backups are two ways to do this. Both data
in transit and data at rest should utilize robust encryption to prevent unauthorized access to
sensitive information. Strict identity and access management (IAM) laws ensure that only
authorized individuals may view or alter data. Disaster recovery plans need to be developed
and tested often in order to quickly restore data and services in the event of a loss.
Hacker intervention and unreliable APIs may be minimized by implementing safe coding
standards to prevent typical vulnerabilities like SQL injection and cross-site scripting (XSS).
Strong authentication and authorization mechanisms, like OAuth 2.0, are used to guarantee
that only authorized users may access APIs. Similar to penetration tests, regular security
testing assists in identifying and resolving such vulnerabilities. An API gateway can be used
to manage, secure, and monitor API traffic. It provides features like rate limits and threat
detection.

To prevent user account hijacking, enforce strong password constraints and multi-factor
authentication (MFA), which provide an extra degree of security beyond passwords.
Monitoring user activity and implementing alerts can be beneficial.

Determine and resolve any potential account breaches. In order to lessen the risk of social
engineering attacks, users must be made aware of phishing efforts and trained to recognize
unusual emails or behaviors. Secure session management features, such as session timeouts
and secure cookie properties, further safeguard user accounts.

Protecting service provider modifications requires implementing comprehensive change

management protocols with audit trails and approval workflows, as well as limiting access to
settings through strict IAM restrictions. Monitoring tools are able to identify unauthorized
changes and, if necessary, revert to safe configurations. Setting used by service providers are
routinely evaluated to ensure that they adhere to best practices, regulations, and safety
standards.

117

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

To defend against denial of service (DoS) attacks, make use of cloud providers' DoS
protection services, such as AWS Shield, Azure DDoS Protection, and Google Cloud
Armour. Set up network security measures including firewalls, traffic filtering, and rate
limiting to control and manage incoming traffic. It is critical to have scalable architectures
that can handle traffic surges and to employ autoscaling features to adjust resources
dynamically in response to demand. Using redundancy and failover mechanisms further
ensures high availability and resilience to denial-of-service attacks.

External data interchange security requires the use of encryption technologies like SSL/TLS
for safe data transport and data integrity checks to prevent manipulation. IAM policies that
limit access to data exchange endpoints ensure that only reliable organizations are able to
share data. Using best practices, including input validation and logging, to secure APIs and
webhooks adds further protection against unauthorized access and data breaches.

Lastly, to lessen the impact of cyberattacks, employ threat detection and response
technology to swiftly identify and manage any hazards. Regularly applying the latest
security patches to all software and systems protects against known vulnerabilities.

Safe Design and Architecture

Establishing a secure architecture and design requires building a system or infrastructure with
strong security measures included from the beginning. This include putting controls in place,
taking security requirements into account, and designing the system to minimize potential
risks and vulnerabilities. The aim is to create a robust and secure data and resource
environment by incorporating security measures into all systems, networks, and application
lifecycle stages.

118

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Secure Architecture and Design Features

A defense-in-depth approach may be used by integrating many security tiers—such as

network segmentation, secure APIs, encryption, and access controls—into the cloud
platform's architecture. Use automated security testing, adhere to secure coding standards,
and conduct code reviews to identify and address vulnerabilities in software components in
order to maintain secure coding practices.
Implement dependable authentication and authorization methods by combining multi-factor
authentication (MFA), thorough identity and access management (IAM), and role-based
access controls (RBAC) to ensure accurate user and resource authentication and
authorization. Use threat modeling to identify potential threats, vulnerabilities, and attack
pathways in order to fully understand the security requirements of a system and to create
appropriate defenses against such hazards.

Approach to Data Security and Privacy:

Data should be encrypted both while it is in transit and at rest to prevent unwanted access.
Make use of robust encryption guidelines and handle encryption keys safely.
To safeguard sensitive data, particularly when sharing it with third parties or in non-
production environments, use data masking and tokenization techniques.
Access Controls: To guarantee that only authorized users can access sensitive data,
implement stringent access controls utilizing Identity and Access Management (IAM)
regulations.

Execution:

Use cloud provider encryption services like Google Cloud Key Management, Azure Key
Vault, and Amazon Key Management Service (KMS). Make sure that encryption is turned on
for all transmission and storage of data.

119

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

IAM Guidelines:

To restrict access based on roles and responsibilities, define and implement IAM policies.
For increased security, use multi-factor authentication (MFA).
Tools for Data Masking: Use tokenization and data masking techniques that adhere to legal
requirements and safeguard sensitive data.

Method for Handling Regulatory Difficulties and Compliance:

Understand the Rules:

To ensure that your cloud configuration is compliant, educate yourself on the relevant laws
and rules (such as GDPR, HIPAA, and PCI-DSS).
Instruments for Conformity: To ensure regulatory compliance and conduct continuous
compliance audits, make use of cloud-native compliance capabilities and tools.

Execution:

Provider Certifications:

Choose cloud service providers with certifications that are appropriate for your sector. Make
sure that their offerings comply with applicable regulations.

Compliance Management:

To automate compliance monitoring and reporting, use compliance management technologies

like AWS Config, Azure Policy, or Google Cloud Security Command Center.
Documentation: Keep thorough records of all compliance measures, such as security controls
and data management guidelines.

120

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

The advantages of secure design and architecture

Enhanced Data Protection:

Preventing unwanted access, security threats, and possible data breaches; Putting security
measures in place at several levels for increased data protection.

Enhanced System Security:

• By including security considerations into the design process, the probability of security
vulnerabilities is decreased.

• The creation of a robust system architecture that can withstand attacks and successfully
guard against possible breaches.

Regulatory compliance includes:

assisting firms in conforming to legal requirements and avoiding fines connected with non-
compliance; facilitating compliance with industry-specific standards and data protection
legislation.

Reduced Security Risks:

• Determining and reducing possible security threats by employing appropriate security

controls and doing threat modeling.

• A reduction in the system's overall vulnerability to security threats.

121

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Secure Architecture and Design Drawbacks

Increased Complexity:

Adding a variety of security controls and processes to an already complex system necessitates
ongoing maintenance, additional resources, and expertise.

• Possible effects on development schedules and expenses as a result of increased complexity.

Performance considerations:

The effectiveness of some security measures, including strong encryption and authentication,
may be impacted.
Analyzing and optimizing closely is necessary to strike a balance between security and
performance.

Usability Challenges:

• Users may experience discomfort and usability concerns if security measures and usability
are not easily reconciled.
• Ensuring user acceptability and compliance requires striking a balance between security and
usability.

Cost implications include:

• One-time costs for personnel, security audits, and security solutions.

• The overall costs of keeping a secure environment are influenced by ongoing maintenance,
monitoring, and update charges.

122

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Cons of Data Security and Encryption

Performance Impact:

Data encryption may have an impact on a system's performance, especially when coping
with resource constraints or massive data quantities. The amount of computing power needed
for encryption and decryption procedures might affect how responsive and efficient a system
is.

Complexity of Key Management:

• To guarantee the security of data encryption, effective key management is essential. The
complexity of key management rises with the quantity of encrypted datasets and encryption
keys. This calls for thorough preparation, efficient execution, and ongoing supervision.

Data Recovery and Availability:

• When there is a loss of data or keys, recovering the data can be difficult. Data loss and lack
of availability could occur from encrypted data that is permanently inaccessible without the
right encryption keys.

User Experience:

• User experience and productivity may be impacted by the additional steps or authentication
requirements that the procedures of data encryption and decryption may bring. Achieving the
ideal balance between security and usability is essential to prevent users from becoming
overly frustrated.

Frequent Evaluations of Security

Periodic security assessments involve routinely analyzing an organization's security

processes, infrastructure, and systems to find gaps, weaknesses, and areas of noncompliance.
Determining how effective security controls and procedures are involves a number of steps,
including technical analysis, policy evaluations, and stakeholder discussions.

123

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Characteristics of Frequent Security Evaluations

Effect on System Performance:

Data encryption may have an impact on a system's performance, especially in situations

when there are few resources or data-intensive tasks. Processes involving encryption and
decryption may need a large amount of processing power, which could affect system
performance and response times.

Complexity of Key Management:

• Safe data encryption depends on effective key management. Careful preparation, efficient
execution, and continuous management are necessary for the generation, distribution, storage,
and revocation of encryption keys. As the quantity of encrypted data sets and encryption keys
increases, so does the complexity of key management.

Difficulties with Data Recovery and Availability:

• Data recovery might become extremely difficult if there is a loss of data or keys. In the
event that the right encryption keys are lost, encrypted data may be irreversibly unreadable,
compromising data availability and causing data loss.

Impact on User Experience:

• The encrypting and decrypting of data may require extra steps or authentication, which
could have an impact on user experience and productivity. In order to avoid user annoyance,
security and usability must be properly balanced.

124

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Overview of Vulnerability Scanning:

Vulnerability scanning is a vital component of security assessments that uses automated

technologies to examine systems, applications, and network devices for known security
flaws, configuration errors, and possible infrastructure weaknesses.

Penetration testing, sometimes referred to as ethical hacking, is the process of making

permissioned attempts to take advantage of security flaws. This realistic attack simulation
evaluates the efficacy of defenses and pinpoints possible entrance locations for intruders.

Evaluation of Policies and processes:

To make sure that security policies, processes, and guidelines are current, thorough, and in
compliance with industry and legal standards, an evaluation of these documents is carried
out. This evaluation guarantees that security controls are established and documented
appropriately.

Regular Security Assessments' Benefits

Finding Security Weaknesses:

• Overview: Frequent security evaluations assist in identifying holes, susceptibilities, and

weaknesses in an organization's security framework, allowing for the prompt correction of
security flaws before malevolent entities may take advantage of them.

125

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Risk management:

• Overview: By using security assessments, organizations are able to identify and rank risks.
This information helps them make efficient resource allocation decisions and put in place
appropriate security measures to counteract any attacks.

Adherence to Regulations and Compliance:

• Overview: Regular security evaluations help companies make sure they are in compliance
with applicable security guidelines, regulations, and laws. This makes it possible to align
security procedures with industry-specific laws.

Promotion of Continuous Improvement:

• Overview: Security evaluations provide information on an organization's security posture,

thereby fostering a culture of ongoing improvement. Regularly examining security controls
and processes helps organizations find areas for improvement, update security measures,
and improve overall security resilience.

126

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Examine critically the data protection measures that a company should use
when switching to a cloud solution.

Increased scalability, cost effectiveness, and operational flexibility are just a few advantages
of migrating to a cloud system. Businesses need to handle the major data security challenges
that this poses in order to secure sensitive information. To guarantee data security before and
after transfer, a comprehensive and well-considered approach is required. This requires
assessing potential risks, selecting a reputable cloud service provider, putting robust
encryption and access controls in place, developing dependable backup and recovery plans,
closely monitoring cloud activity, ensuring data integrity, and educating staff members on
security best practices. By taking proactive measures to address these aspects, businesses may
safeguard their assets, maintain compliance, secure their data in the cloud, and lower
potential risks.

Conduct a thorough risk analysis

Prior to initiating any migrations, an organization needs to do a comprehensive risk

assessment. This entails figuring out the kinds of data being transferred, their level of
sensitivity, and whether any laws are relevant. Understanding the potential risks and
vulnerabilities specific to the data and cloud environment is necessary to develop a solid
security plan. The risk assessment should evaluate the cloud computing service provider's
(CSP) security procedures and compliance with industry certifications and standards.

Choose a Reputable Cloud Service Provider

Selecting a reliable and trustworthy cloud service provider (CSP) is one of the most crucial
aspects in cloud data security. Companies want to look for vendors with strong security
credentials and compliance certifications, like ISO/IEC 27001, SOC 2, and GDPR
compliance. It is imperative to confirm the CSP's competence in data encryption, data
residency, and general security posture. The CSP should offer transparent security rules,
robust incident response procedures, and a history of protecting customer data.

127

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Set Up Sturdy Access Controls

Access control is the foundation of cloud security. Businesses should adhere to the principle
of least privilege, ensuring that users have the bare minimum of access necessary to fulfill
their duties. Role-based access control, or RBAC, is the best way to limit permissions based
on user responsibilities inside the firm. Multi-factor authentication, or MFA, should be
necessary for access to sensitive data and systems in order to provide an additional layer of
security against unauthorized access.

Encrypt Information

Data encryption is necessary to stop intrusions and unauthorized access. Organizations advise
that sensitive data should always be encrypted, both while it's in transit and while it's at rest.
Enhancing data security is achieved by encrypting data with strong methods like AES-256.
Moreover, it is imperative to put effective key management practices into place, such as
utilizing hardware security modules (HSM) or the CSP's key management services to safely
store and manage encryption keys. Even in the case of a breach, data that is encrypted keeps
unauthorized parties from reading it.

Make strategies for recovering and backing up data.

To prevent data loss due to malware, system errors, or unintentional deletions, robust data
recovery and backup protocols are essential. Organizations should automate and regularly
carry out critical data backups, and they should have access to safe storage for these backups.
To ensure availability in the event of a regional failure, data should be copied across
numerous geographic regions. It is crucial to regularly test disaster recovery plans to make
sure that data can be retrieved quickly and effectively when needed.

128

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Monitor and Analyze Cloud Activity

Continuous monitoring and auditing of cloud activities is necessary to promptly detect and
resolve security issues. Organizations should use the monitoring tools provided by their
CSPs, such as AWS CloudTrail, Azure Monitor, or Google Cloud Logging, to keep an eye on
changes, access, and usage patterns. Frequent security audits and the establishment of real-
time alerts for suspicious activities can help maintain a secure cloud environment and ensure
compliance with security standards.

Staff Education and Training

Given that human error is a primary cause of data breaches, employee education and training
are crucial. Organizations should provide regular training on data protection policies, cloud
security best practices, and how to recognize and manage security threats like phishing
schemes. An informed workforce is better able to follow security protocols and reduces the
likelihood of inadvertent data leaks.

A Critical Examination of Validation and Data Integrity

Data integrity is the process of ensuring that data is reliable, consistent, and protected from
unauthorized alterations. Integrity tests ensure that the data is reliable and accurate while
protecting against data corruption.
To guarantee that data is authentic and unaltered during transmission and storage, put
validation procedures into place.

Implementation:

Integrity Checks:

Use digital signatures, hashes, and checksums to confirm the accuracy of data. Install systems
and services that make data integrity checks easier.

129

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Methods for Validation:

Workflows for data processing should include data validation processes to ensure that data is
consistent and dependable.

Critical Assessment of Vendor Management

Vendor Security:

Verify that the security guidelines and practices of cloud service providers adhere to your
company's data protection laws.

Service level agreements, or SLAs:

SLAs should include a comprehensive description of the provider's responsibilities for data
security, including incident response, compliance, and data handling.
Implementation:

Vendor Assessment:

Conduct a thorough analysis of cloud providers' security protocols and certifications. Verify
if they have implemented stringent security controls and compliance procedures.

SLAs and Agreements:

It is important to negotiate and create SLAs that outline security requirements and
expectations. Regularly review SLAs and make any required adjustments.

130

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Recognizing the Security Measures Taken by the Cloud Provider

Moving to a cloud solution requires understanding and evaluating the security measures used
by the selected cloud provider. A thorough examination of the security protocols is required
to guarantee that data is safeguarded during the transmission process. Important components
include:

Physical Security Overview:

Cloud service providers maintain extremely safe data centers that are outfitted with a range of
physical security features, including environmental controls, access restrictions, and
surveillance.

Control of Access: Data centers employ security measures such as biometric authentication,
security guards, and surveillance cameras to restrict physical access to only authorized
workers.

Take Actions:

Numerous cloud service providers have obtained ISO 27001 certification, indicating that they
adhere to the stringent physical security requirements outlined in the standards.
Environmental Controls: Data centers are outfitted with advanced fire detection and
suppression systems, backup power supplies, and climate control to ensure uninterrupted
operations.

131

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

A Overview of network security

Network Segmentation:

Providers employ network segmentation to safeguard customer data and prevent unauthorized
access.
Firewalls and Intrusion Detection: These systems monitor and control all incoming and
outgoing network traffic by applying security rules.

Take Actions:

DDoS Protection:

Distributed Denial of Service (DDoS) protection is a common feature offered by cloud

service providers to fend against protracted attacks.

VPN and Encryption:

Secure VPNs and encryption methods are used to protect data while it is being sent over
public and private networks.

A Synopsis of Data Security

Encryption:

Providers offer robust encryption for data both in transit and at rest in order to ensure
confidentiality and integrity.
Key management: Secure key management technologies are available to effectively govern
encryption keys.

132

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Take Actions:

Data Isolation:

Customer data is separated to safeguard privacy and prevent unauthorized access.

Backup and Replication: Regular backups and data replication across many geographic
locations are carried out to ensure data availability and durability.

Transparency and Auditability:

Examining security protocols is part of determining how transparent and auditable a cloud
service is. This entails examining their logging and monitoring features, audit log
accessibility, and security report generation capabilities. Organizations can monitor a
provider's compliance, identify possible violations, and satisfy their own compliance
requirements with the help of transparency and auditability.

Organizations may make educated judgments and put in place suitable security safeguards for
their data by learning about the security measures used by the cloud provider. This provides
assurance for the duration of the data's lifetime in the cloud environment by guaranteeing that
the essential security protocols and controls are in place to maintain the data's confidentiality,
integrity, and availability.

133

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

REFERENCES

Cloud Computing: Concepts, Technology & Architecture (The Pearson Service

Technology Series from Thomas Erl) 1st Edition

by Thomas Erl (Author), Ricardo Puttini (Author), Zaigham Mahmood (Author)
[Link]
Architecture/dp/0133387526

Architecting the Cloud: Design Decisions for Cloud Computing Service Models (SaaS,

PaaS, and IaaS) 1st Edition

by Michael J. Kavis (Author)
[Link]
Service/dp/1118617614

Cloud Security and Privacy: An Enterprise Perspective on Risks and Compliance 1st

Edition
by Tim Mather (Author), Subra Kumaraswamy (Author), Shahed Latif (Author)
[Link]

A view of cloud computing

[Link]

Cloud computing: state-of-the-art and research challenges

Qi Zhang,
Lu Cheng &
Raouf Boutaba
[Link]

Cloud Security Issues

OCT 2009
[Link]

134

Downloaded by diwanshu (diwanshuanime@[Link])

 lOMoARcPSD|57037475

Amazon Web Services (AWS) Documentation

[Link]

The NIST Definition of Cloud Computing

Peter M. Mell, Timothy Grance

[Link]
computing#:~:text=Cloud%20computing%20is%20a%20model,effort%20or%20service%2
0provider%20interaction.

The Reality of SMB Cloud Security in 2022

Written by Sally Adam
[Link]
2022/#:~:text=The%20Cloud%20Is%20a%20Growing%20Target%20for%20Cyberattacks
&text=The%20survey%20revealed%20major%20changes,of%20attacks%20on%20their%2
0organization

aztechit. (n.d.).
[Link]

[Link]. (n.d.).
Retrieved from [Link]

Cloud Computing Environment and Security Challenges: A Review

Muhammad Faheem Mushtaq1 , Urooj Akram1 , Irfan Khan2 , Sundas Naqeeb Khan1 , Asim
Shahzad1 , Arif Ullah1 1 Faculty of Computer Science and Information Technology, Universiti
Tun Hussein Onn Malaysia (UTHM), Johor, Malaysia 2Directorate of Information Technology
(IT), Govt. Sadiq College Women University, Bahawalpur, Pakistan

[Link]
20/publication/320802850_Cloud_Computing_Environment_and_Security_Challenges_A_R
eview/links/59fc20da458515d07062864c/Cloud-Computing-Environment-and-Security-
[Link]

Dynamic Resource Allocation Using Virtual Machines for Cloud Computing

Environment
[Link]

Cloud Computing Architecture: A Critical Analysis

icaac Odun-Ayo; M. Ananya; Frank Agono; Rowland Goddy-Worlu
[Link]

135

Downloaded by diwanshu (diwanshuanime@[Link])