ASSIGNMENT – 3
Ques 1: Explain the benefits of SaaS.
SaaS (Software as a Service) offers several key benefits:
● Cost Savings: Reduces upfront costs associated with purchasing and
installing software. Typically involves subscription-based pricing,
which can be more budget-friendly.
● Accessibility: Users can access applications from anywhere with an
internet connection and a compatible device.
● Scalability: Easily scale up or down the number of users and
resources based on business needs without significant
infrastructure changes.
● Reduced IT Overhead: The SaaS provider handles software
maintenance, updates, security, and infrastructure management,
freeing up internal IT resources.
● Automatic Updates: Users automatically benefit from the latest
features and security patches without manual intervention.
● Faster Deployment: SaaS applications are typically ready to
use much faster than traditional on-premises software.
● Focus on Core Business: By outsourcing software management,
organizations can focus more on their core business activities.
Ques 2: What is cloud migration? Explain the on-premises to cloud
migration process. Cloud migration is the process of moving digital
assets, IT resources, applications, data, or services from an on-premises
infrastructure or another cloud environment to a cloud computing
environment.
The on-premises to cloud migration process typically involves the following
stages:
1. Assessment and Planning:
○ Identify Goals: Define the reasons for migration (e.g., cost
reduction, scalability, agility).
○ Inventory Assets: Document all existing applications, data,
infrastructure, and dependencies.
○ Evaluate Cloud Options: Research and select the most suitable
cloud service provider (e.g., AWS, Azure, GCP) and deployment
model (e.g., IaaS, PaaS, SaaS).
○ Develop a Migration Strategy: Determine the best approach
for each application and data set (e.g., re-host, re-platform, re-
architect, re-purchase, retire).
○ Cost Analysis: Estimate the costs associated with migration
and ongoing cloud usage.
○ Security and Compliance Planning: Define security
measures and ensure compliance with relevant regulations
in the cloud environment.
2. Migration:
○ Data Migration: Transferring data to the cloud, considering
data volume, transfer speed, and security.
○ Application Migration: Moving or re-deploying applications to
the cloud based on the chosen strategy. This might involve lifting
and shifting (re-hosting), making some modifications (re-
platforming), or completely redesigning applications for the cloud
(re-architecting).
○ Infrastructure Setup: Provisioning and configuring
necessary cloud resources (e.g., virtual machines, storage,
networking).
3. Testing and Validation:
○ Functional Testing: Ensuring applications work as
expected in the cloud environment.
○ Performance Testing: Verifying that applications meet performance
requirements
in the cloud.
○ Security Testing: Validating the implemented security controls in the
cloud.
○ User Acceptance Testing (UAT): Allowing end-users to test the
migrated systems.
4. Deployment and Cutover:
○ Deploy Migrated Systems: Launch the applications and
services in the production cloud environment.
○ Cutover: Transitioning users and traffic from the old on-
premises environment to the new cloud environment. This
needs careful planning to minimize downtime.
5. Optimization and Management:
○ Performance Monitoring: Continuously monitoring the
performance of cloud resources and applications.
○ Cost Optimization: Identifying and implementing ways to reduce
cloud spending.
○ Security Management: Ongoing management and
maintenance of security controls.
○ Scaling and Automation: Leveraging cloud capabilities
for scalability and automation.
Ques 3: Explain the difference between public cloud and community
cloud.
The primary difference between public cloud and community cloud lies
in their ownership and access.
● Public Cloud:
○ Ownership: Owned and operated by a third-party cloud
service provider (e.g., AWS, Azure, GCP).
○ Access: Resources and services are made available to the
general public over the internet. Multiple organizations share the
same underlying infrastructure, although their data and
resources are logically isolated.
○ Cost: Typically offers a pay-as-you-go model, which can be
very cost-effective for many organizations.
○ Scalability: Highly scalable and elastic, allowing
organizations to easily scale resources up or down as
needed.
○ Security: Providers implement robust security measures, but
organizations are also responsible for securing their own data
and applications within the cloud.
○ Examples: Amazon Web Services (AWS), Microsoft Azure,
Google Cloud Platform (GCP).
● Community Cloud:
○ Ownership: Shared by several organizations with common
interests, regulatory compliance, security requirements, or
performance needs. It might be managed internally by one of
the participating organizations or by a third-party provider.
○ Access: Access is restricted to the specific community of users.
○ Cost: Cost is typically shared among the participating organizations.
○ Scalability: Scalability can be more limited compared to a public
cloud, depending on the design and the needs of the community.
○ Security: Often provides enhanced security and compliance
specific to the needs of the community.
○ Examples: A cloud used by several government agencies, a
cloud shared by healthcare organizations to comply with specific
regulations, or a cloud for research institutions collaborating on a
project.
In summary: Public clouds are open to the general public and offer broad
services and scalability, while community clouds are tailored to a specific
group of organizations with shared
needs and often provide enhanced security and compliance for that group.
Ques 4: Explain the security risks of cloud computing.
While cloud computing offers numerous benefits, it also introduces several
security risks that organizations need to be aware of and address:
● Data Breaches: Sensitive data stored in the cloud can be a
target for cyberattacks, potentially leading to unauthorized
access, theft, or loss of information.
● Data Loss: Data can be lost due to accidental deletion, service
outages, lack of proper backups, or malicious attacks.
● Insufficient Access Control: Weak or poorly configured access
controls can allow unauthorized users to access sensitive data
and resources.
● Insider Threats: Malicious or negligent actions by employees or
insiders within the cloud provider or the customer organization can
compromise security.
● Misconfiguration: Incorrectly configured cloud services and
resources can create vulnerabilities that attackers can exploit.
● Lack of Visibility and Control: Organizations may have less direct
control over the underlying infrastructure and security controls
compared to on-premises environments.
● Compliance Challenges: Meeting specific regulatory and
compliance requirements can be complex in a shared cloud
environment.
● Denial of Service (DoS) Attacks: Cloud services can be
targeted by DoS attacks, disrupting availability and impacting
business operations.
● Shared Technology Vulnerabilities: Because multiple tenants
share the underlying infrastructure in a public cloud, vulnerabilities in
the shared environment could potentially affect other tenants.
● Third-Party Vendor Risks: Security vulnerabilities or breaches
at the cloud service provider can directly impact the customer's
data and applications.
● Account Hijacking: Attackers can gain unauthorized access to
cloud accounts through stolen credentials or other methods, leading
to data theft or misuse of resources.
● Evolving Threats: The threat landscape is constantly evolving,
requiring continuous monitoring and adaptation of security
measures in the cloud.
Ques 5: Explain the comparison of existing Cloud platform and web
services.
Cloud Platforms and Web Services are related but distinct concepts in the
realm of cloud computing and distributed systems. Here's a comparison:
Feature Cloud Platform Web Services
Scope A comprehensive suite Individual, self-contained
of infrastructure, units of functionality
platform, and accessible over
software services. a network.
Nature Provides a complete Offer specific
environment for building, functionalities that can
deploying, and be consumed by other
managing applications or services.
applications.
Examples AWS, Azure, GCP, SOAP, RESTful APIs
(e.g.,
Alibaba Cloud,
accessing weather data,
Oracle Cloud payment processing).
Infrastructure.
Abstraction Offers higher levels of Focus on the application
abstraction, managing layer, abstracting away
underlying infrastructure. implementation details.
Purpose To provide a broad To enable
range of communication and
Feature Cloud Platform Web Services
computing resources data exchange between
and services on different applications and
demand. systems.
Building Blocks Often utilize web Can be used as building
services as components, blocks within cloud
along with other services
like databases, storage, platforms or in other
and networking. distributed architectures.
Interaction Users interact with the Applications interact with
platform through web services through
consoles, APIs, and defined protocols (e.g.,
command-line HTTP, SOAP) and data
interfaces to provision formats (e.g., JSON,
and manage XML).
resources.
Management Cloud providers manageWeb services are
the underlyingtypically managed by the
infrastructure, while provider of that specific
users manage theirservice. Consumers
applications andmanage how they
configurations within theintegrate and utilize the
platform. service.
In essence:
● Cloud platforms are the overarching environments that provide a
wide array of computing resources and services, including
infrastructure (IaaS), development platforms (PaaS), and software
applications (SaaS). They often utilize web services internally.
● Web services are individual, modular units of functionality that can be
accessed over a network using standard protocols. They are a key
technology that enables communication and integration within and
between cloud platforms and other distributed systems.
Think of a cloud platform as a complete operating system for the cloud,
while web services are like individual applications or functions that run on
that operating system or can be accessed by other systems over the
network.