LESSON 1:Cloud Computing

Emerging Technologies and Application

Google cloud
Data center owned by Facebook
Racks of Facebook
Computer used

These Computers are technically called as servers.

What is a server?

 A server is a system — either hardware or software

— that serves resources, data, services, or
programs to computers (called clients) over a
network.

 Modern businesses need a centralized data

storage location. Any computer can technically be
a server if it’s set up correctly. But if you’re running
a business with multiple employees — all using
computers — then you need a designated server
that can handle your IT needs.

 Simply put, a server is a computer that

communicates with other computers. When one of
those other computers — called “clients” —
Components of a server

 A motherboard is a circuit board that distributes

electricity and connects (and facilitates
communication with) all other server components.

 The Central Processing Unit (CPU) is like the

control center of a server. It executes the instructions
provided by the hardware and software on the
device.

 Memory. The memory of a server is the available

storage space. It includes RAM (Random Access
Memory), which is temporary storage — it only holds
data when the device is connected to power. For
permanent storage, hard drives are required.

 A hard drive is a piece of hardware that is included

Components of a server

Network connection. To function, every server needs

a network connection. To do so, servers have an NIC
(network interface card) and a physical port or ports.

Power supply. All servers need to be connected to

power. Most computer servers need a power supply of
300 watts or more.
Data Center of Facebook
What is a network?

• A network connects things together. A cellular network is a

network of equipment connecting phones together.

• A social network is a network connecting people together.

• The room full of computers connected together is a network and

made accessible over another network (internet) called as cloud.
What isn’t and Cloud Service?

This is a small accounting software which runs only in your computer.

Any program which runs only on one computer can not be a cloud
service.
What is Cloud Computing?

 Cloud computing refers to the delivery of computing

services such as storage, processing power, and software
applications over the internet with pay-as-you-go-pricing.

 Instead of installing and managing software on local

computers, users can access these services on-demand
from remote servers or data centers.

 Cloud computing is a model for delivering computing

services over the internet, allowing individuals and
businesses to use software and hardware that are
managed by third parties at remote locations.
The Problem Cloud Computing Solves:
The "Old Way" vs. The "New Way"
The "Old Way" (On-Premises): The company had to buy powerful
physical servers, storage disks, and networking equipment. This
required a huge upfront investment, known as Capital Expenditure
(CapEx).

They had to guess their peak traffic needs, often buying far more
capacity than they used day-to-day, leading to wasted resources. If
they needed a new server, the process of ordering, installing, and
configuring it could take weeks or even months.

The "New Way" (Cloud Computing): The cloud changes this model
entirely. Instead of buying hardware, you rent computing power
from a cloud provider (like AWS, Google, or Microsoft). This model
eliminates guesswork, long waiting times, and wasted resources.
What is Cloud Computing?

A snap from Amazon Web Service. (AWS).

Cloud Services vs Cloud Providers

Cloud provider is a company that owns a lot of computer and rents

them out as a service. Rent means you pay hard cash for the cloud
provider service. (You remember the data centre owned by
facebook, google. All these companies are cloud service providers)

Some of the cloud providers are :

1. Amazon AWS
2. Google Cloud Platform
3. Microsoft Azure

The cloud provider rents memory, storage,network, bandwidth,

database, machine learning, voice recognition, imagine recognition.

A cloud provider is like a car rental company.

Cloud Service

Some of the cloud services:

1. Facebook messenger: exchange messages in Facebook
2. Amazon: buy mostly everything
3. YouTube: watch videos
4. Google maps: figure out where you are and how to navigate to
other locations
5. Amazon Kindle: read eBooks
6. Instagram: share filtered selfies
7. Twitter: social media platform to exchange ideas.
8. Google photos: store and Manage photos.
Key Operations of Cloud Computing

 Storage, Backup, and Recovery of Data: Securely storing data on

remote servers, ensuring easy backup and recovery in case of data
loss.
 Delivery of Software on Demand: Accessing software applications
as a service without the need for local installation.

 Development of New Applications and Services: Utilising cloud

platforms to develop, test, and deploy new applications and
services efficiently.(Deployment is the process of making an
application, software, or service available for use)

 Streaming Videos and Audio: Delivering multimedia content

seamlessly over the internet.(Ex. Netflix and Amazon Prime)
Cloud Storage

It is all the method of storing data in the cloud .That is called cloud
storage. S3 means Simple Storage Device. It is the very first cloud
service offered by Amazon in 2006.
Advantages of Cloud Computing

Software Developers made EC2 (Cloud Computing of AWS)

successful.
• : Accessibility Anywhere, Anytime, Enhanced access across
various branches or offices globally empowering employees,
clients, and customers to access up-to-date information from any
location or device.

• Reduced Hardware and Software Dependencies: Eliminates the

need for individual servers, cables, and other hardware, as cloud
providers manage these resources for a regular fee, significantly
reducing overall expenses.

• Instant Access to Insights: Cloud platforms facilitate immediate

access to data, enabling better decision making and predictive
analysis based on historical data.
Disadvantages of Cloud Computing

1. Vendor Lock-in creates dependency. (Vendor lock-in is a situation

in which a customer using a product or service cannot easily
transition to a competitor's product or service.)
2. Paying for hidden charges.
3. Reliable internet connectivity:Dependence on stable and fast
Internet connections for accessing cloud services.
4. Data Security: Difficulty in ensuring the protection of data stored
on remote servers.
Infrastructure as a Service (Iaas)

1. In this model, the service provider maintains the underlying

hardware, such as servers, storage, and networking
components.
2. The end user is responsible for managing the operating system,
development platform, and the applications running on top of the
infrastructure.
3. This model is suitable for IT architects who need control over the
virtual machines and the software environment.
4. The roles and responsibilities of the provider and the end user in
each model are clearly indicated in the following figure.
Pizza as a Service
Services offered in IaaS

 Compute: Virtual computing power and main memory are

provided to users as part of Computing as a Service.

 Storage: Backend storage for files and VM images is offered.

 Network: Virtual networking components such as bridges, routers,

and switches are available.

 Load Balancers: They manage sudden spikes in usage to balance

the load.

 Charging Based on Usage: IaaS operates on a pay-per-use basis,

meaning customers pay only for the resources they consume,
reducing unnecessary hardware investments.
Services offered in Iaas

 Reduced Cost: Customers can rent computing resources on a

subscription basis instead of investing in physical infrastructure,
lowering overall costs.

 Elastic Resources: Resources can be scaled up or down based on

user requirements using load balancers, which automate dynamic
scaling.

 Better Resource Utilisation: Efficient utilisation of infrastructure

resources ensures a return on investment.
Iaas
 How they work together and build a software

When you watch Netflix, your video travels through many layers, and
each layer solves one specific problem.”

We now go bottom → top, exactly like the stack diagram.

1. Network:The system that moves data between users and servers.

In Netflix on AWS:
• Internet routes your request (“Play video”)
• Data packets travel from Netflix servers to your device

2. Servers:Powerful computers that do processing work.

In Netflix on AWS:
AWS servers:
• Decide which video to stream
• Handle millions of users simultaneously
How they work together and build a
software
3. Storage: Permanent place to keep data. Without Storage, Netflix
forgets what you watched yesterday.

4. Virtualization: One physical server acting like many virtual

machines.

One server runs:

• Streaming service
• Recommendation engine
• Billing service

5. Guest Operating System (OS):

The basic software that controls hardware. Manages CPU, memory,
files. Without OS, Applications cannot run.
How they work together and build a
software
6. Middleware:Software that connects applications with OS and
databases.

7. Data: Information used to make decisions.

In Netflix:
• What you watch
• How long you watch
• What you skip

8. Application: What the user sees and interacts with.

In Netflix:
• Mobile app
• Website
• Smart TV app
Advantages of IaaS

 Cost Efficiency: By eliminating the need for physical resources,

IaaS reduces overall investment costs.

 Scalability: Resources can be easily scaled to meet changing

demands.

 Flexibility: Users have control over their virtual environments

without managing physical hardware.

 Resource Optimization: Efficient use of shared resources

maximises return on investment.

 Environmental Benefits: Reduced power consumption due to

shared infrastructure supports green IT practices.
Service Providers

Infrastructure as a Service (IaaS) is offered by several leading

providers, each with its own set of features and benefits. Here are
some of the most prominent examples:

• Oracle Cloud Infrastructure

• IBM Cloud

• Google Cloud Platform (GCP)

• Amazon Web Service

Virtualisation

This process partitions physical resources—such as CPU, memory,

and storage—into multiple virtual machines (VMs), each operating as
if it were an independent physical machine.

Thus, virtualisation can be defined as a technology that allows

multiple operating systems (OS) to run simultaneously on a single
physical server, each thinking that a physical machine entirely to itself
Platform as a Service (PaaS)

 Platform as a Service (PaaS) is a cloud computing model where a

third-party provider offers the software and hardware tools
needed to develop, test, and run applications.

 PaaS provides developers with a virtualised development platform

to build and deploy their applications. PaaS enables developers to
use programming languages supported by the provider to
develop applications online and deploy them using the platform’s
testing tools.

 For example, AWS Elastic Beanstalk is a PaaS offered by Amazon

Web Services that helps developers quickly deploy and manage
applications while AWS takes care of the needed resources like
servers, load balancing, and scaling.
Platform as a Service (PaaS)

• Working : So lets say you have written a code for the service you
want to provide but dont want to bear the additional cost of
purchasing and maintaining infrastructure required to build and
deploy your code.

• So you go to a PaaS vendor and deploy your code there. Again this
is pay as you use model. You will have some memory space / RAM
allotted to you for free.

• As your application scales, your customer base increases you will

have to pay for that. Best thing about this is that you don't have to
pay unless your requirements exceed the ones provided by the
PaaS vendor.
PaaS
 Services offered in PaaS

PaaS offers a wide range of programming languages, databases, and software

tools to support application development and deployment, including:

 Programming Languages: PaaS supports multiple programming languages,

such as Python, Java, Scala, PHP, and Go, allowing users to develop their
applications in their preferred language.

 Application Platforms: PaaS offers various platforms like Joomla, [Link],

Drupal, WordPress, Django, and Rails for application development.

 Databases: PaaS providers include backend databases such as Redis,

MongoDB, ClearDB, Memebase, PostgreSQL, and Cloudant for data storage.

 Testing Tools: PaaS platforms include tools for testing applications after
development.
 Advantages

 App Development and Deployment: PaaS provides all necessary

development and testing tools in one place, facilitating quick
software development, testing, and deployment.

 Many PaaS services automate testing and deployment processes,

speeding up the overall development cycle.

 Reduced Investment Cost: PaaS eliminates the need for developers

to invest in high-end infrastructure and licensed development tools.
Developers can rent the required resources, reducing total
investment costs.

 Team Collaboration: PaaS enables developers from different

locations to collaborate on projects via an online shared
development platform.
Limitation

• Security Concerns: Since data is stored on third-party servers,

there are concerns about data security. Although PaaS providers
implement security measures, the level of perceived security may
not match that of on-premises deployments.

• Less Flexibility: PaaS restricts developers’ ability to create their

own application stack. While PaaS offers access to various
programming languages and tools, it may not provide the
flexibility some developers need.

• Dependence on Internet Connection: An internet connection is

required to use PaaS services. Poor internet connectivity can
hinder the usability of the PaaS platform, and offline access is
typically not provided by most PaaS providers.
PaaS
 Software as a service (SaaS)
• SaaS allows end users to access and use provider-hosted cloud-based
applications. These applications can be accessed from multiple client
devices via a web browser or other interfaces, such as web-based
email.

• Users do not have control over the underlying cloud infrastructure,

including networks, servers, operating systems, storage, software
platforms, and configuration settings. SaaS is offered on a subscription
basis, allowing access from anywhere in the world without the need for
local installation.

• Due to its web-delivery model, SaaS eliminates the

need to have IT staff download and install
applications on each individual computer. With SaaS,
vendors manage all potential technical issues, such as
data, middleware, servers, and storage, resulting in
 Types of SaaS services

• Business Services: SaaS providers offer a wide range of business

services, including ERP, CRM, billing, sales, and human resources.

• Social Media Networks: Social media platforms use SaaS to handle

the varying loads due to the growing number of users.

• Document Management: SaaS companies provide services for

creating, managing, and tracking electronic documents.

• Email Services: SaaS email services accommodate the growing

demand for email usage, ensuring scalability and reliability.
 Advantages

• No Client-Side Installation: SaaS services do not require software

installation on client devices.

• Cost Savings: SaaS is billed on a pay-as-you-go basis, allowing users to

pay only for what they use. Various subscription options are available
to meet different user needs, sometimes even offering free services.

• Less Maintenance: The service provider handles updates, monitoring,

and routine maintenance, reducing the burden on users.

• Ease of Access: SaaS services can be accessed from any internet-

enabled device, offering flexibility and adaptability.

• Dynamic Scaling: SaaS services leverage cloud elasticity to handle

sudden spikes in demand without disrupting application performance.
Real World Applications for SaaS

• Google Workspace (formerly G Suite): Gmail, Google Docs, Sheets,

and Drive for collaboration.

• Microsoft Office 365: Online versions of Word, Excel, PowerPoint,

and Teams.

• Zoom: Video conferencing and online meeting solution.

• Salesforce: A leading CRM platform for managing customer

relationships, sales, and marketing.

• Zoho People: For managing employee attendance, leave, and HR

processes.

• SAP Concur: For travel, expense, and invoice management.

SaaS
Types of Cloud Platforms

• Public Cloud: Public cloud platforms are pool of shared network

services managed by third-party providers who deliver computing
resources over the Internet. Examples include Amazon Web
Services (AWS), Google Cloud Platform, Alibaba Cloud, Microsoft
Azure, and IBM Bluemix.

• Private Cloud: A private cloud is dedicated to a single organisation.

It can be hosted either onsite within the organisation’s own data
centre or by a third-party service provider.

• When a private cloud is hosted by a third-party service provider,

the organization uses the infrastructure and services of the
provider, but with a dedicated environment exclusively for their
use.
Key Characteristics of Hybrid Cloud

Hybrid Cloud: This model combines both public and private cloud
platforms, allowing data and applications to move seamlessly between
the two. It offers greater flexibility and helps optimise infrastructure,
security, and compliance.

Integration: Hybrid clouds allow private and public clouds (or on-
premises infrastructure) to work together.

•Example: An organization may run sensitive applications in a private

cloud while using a public cloud for scalability or less critical workloads.

Flexibility: Organizations can move workloads between clouds based

on cost, performance, or security needs.

•Example: Handle unexpected demand by offloading tasks to a public

cloud.
Data Protection with Cloud Security

Cloud data security protects data that is stored (at rest)

or moving in and out of the cloud (in motion) from
security threats, unauthorized access, theft, and
corruption.

It relies on physical security, technology tools, access

management and controls, and organizational policies.

There are three pillars to data security:

1. Data Integrity
2. Data Availability
3. Data Confidentiality/ Data Privacy
Three pillars of data security
 Data confidentiality: Data can only be accessed or modified by
authorized people or processes. In other words, you need to ensure your
organization’s data is kept private.

 Data integrity: Data is trustworthy—in other words, it is accurate,

authentic, and reliable. The key here is to implement policies or
measures that prevent your data from being tampered with or deleted.

 Data availability: While you want to stop unauthorized access, data still
needs to be available and accessible to authorized people and processes
when it’s needed. You’ll need to ensure continuous uptime and keep
systems, networks, and devices running smoothly.

 Often referred to as the CIA triad, these three broad pillars represent the
core concepts that form the basis of strong, effective security
infrastructure—or any organization’s security program. Any attack,
vulnerability, or other security incident will likely violate one (or more) of
Data Protection with Cloud Security
Methods of data protection

1. Encryption: At its most basic level, encryption is the

process of protecting information or data by using
mathematical models to scramble it in such a way
that only the parties who have the key to
unscramble it can access it.

How encryption works?

2. Encryption works by encoding “plaintext” into

“ciphertext,” typically through the use of
cryptographic mathematical models known as
algorithms. To decode the data back to plaintext
requires the use of a decryption key, a string of
numbers or a password also created by an
algorithm.
 Types of Encryption

The two most common types of encryption algorithms

are symmetric and asymmetric.

 Symmetric encryption, also known as a shared key

or private key algorithm, uses the same key for
encryption and decryption. Symmetric key ciphers
are considered less expensive to produce and do not
take as much computing power to encrypt and
decrypt, meaning there is less of delay in decoding
the data.

 Asymmetric encryption, also known as public-key

cryptography, uses two separate keys to encrypt and
decrypt data. One is a public key shared among all
parties for encryption. Anyone with the public key
Symmetric encryption vs
Asymmetric encryption
Data Masking

 Data masking is a cybersecurity technique that

protects sensitive information by replacing it with
fake or randomised data.

 This safeguards sensitive data both at rest (stored)

and in transit (being transmitted). By obscuring
sensitive data, organisations can reduce the risk of
data breaches, identity theft, and regulatory
penalties.

 Replacing PII data (Personal Identifiable Information),

such as names, addresses, etc. with symbols or
characters

 Scrambling the data (although this isn’t as secure).

For instance, you could scramble the digits of a
Data Confidentiality

Data Confidentiality can be achieved by:

 Multi-Factor Authentication (MFA): Adds layers of

verification for user logins.
 Single Sign-On (SSO): Allows users to access multiple
applications with one login.
 Role-Based Access Control (RBAC): Assigns permissions
based on roles.
Cost Benefit analysis and scalability

 First, cloud computing offers a business executive the opportunity

to convert what have traditionally been significant fixed costs of
owning and operating a data center into a variable cost, paid only
by the volume of IT resources that are actually used.

 Data center costs are paid up front, but are capital from an
accounting perspective, where the physical assets are depreciated
over their useful lives.

 Data center costs are paid up front, but are capital from an
accounting perspective, where the physical assets are depreciated
over their useful lives
Cost Benefit analysis and scalability

 Fixed costs are expenses that stay relatively constant regardless of

the level of sales. For example, the cost of renting a corporate
headquarters is likely to be a constant amount (say, $100,000 per
month) regardless of how much revenue the company generates.

 Data centers, and the computing resources, cooling and energy

management equipment, and supporting building automation and
physical security equipment contained therein, are considered
fixed costs, are treated as capital expenses in accounting terms,
and are depreciated over their useful lives per generally accepted
accountingprinciples (GAAP) rules.

 So, if sales are down, you still have to pay the same fixed costs. If
your sales are up, you have the same fixed expense obligations.
Cost Benefit analysis and scalability

 Variable costs, however, vary with the amount of output or sales

that is generated. Examples of common variable costs include raw
materials, packaging, and labor directly involved in a company’s
manufacturing process.

 These costs vary with the amount of output and/or sales volume a
company generates. More sales, more variable costs, but they are
aligned with sales and output volume.

 Cloud computing models, based on the pay-as-you-go model

offered via utility computing benefits, means that the expenses
associated with cloud-provided resources, e.g. IT infrastructure,
platforms as a service (Paas), software as a service (SaaS), vary
more directly with your output or sales volume, and you can add
or reduce capacity based on sales volume or output volume.
Cloud Computing ROA
 ROA tells you what the company can do with what it has (i.e., how
many dollars of earnings they derive from each dollar of assets they
control). Companies that require large initial investments in physical
assets will generally have lower return on assets.

 ROA =Net Income -Interest Expense - Interest Tax Savings/Average

Total Assets

 Data centers and IT infrastructure are treated as a firm’s assets, and

thus will impact the ROA calculation. Under a cloud strategy, the data
centers are owned and operated by an external third party, while the
revenue generated from a cloud-based business model is yours.

 Cloud computing helps reduce IT costs by offloading data centers, IT

operations staff, and related costs to third-party cloud providers
Cloud Computing Cost benefit analysis

 Let’s consider a mid-sized company requiring IT infrastructure for

hosting applications, storing data, and managing business
operations.

Initial Setup cost

Cost Category On-Premise IT Cloud Computing
Hardware (Servers,
$500,000 $0
Networking, Storage)
Software Licenses
Included in cloud
(Database, OS, Security $100,000
subscription
Tools, etc.)
Setup & Installation $50,000 $0
Total Initial Cost (CapEx) $650,000 $0 (Pay-as-you-go OpEx)

 Cloud eliminates upfront capital expenditure (CapEx), turning IT

costs into a predictable operating expense (OpEx).
 Cloud Computing Cost benefit analysis
Cost Category On-Premise IT (Per Year) Cloud Computing (Per Year)
Hardware Maintenance &
$50,000 $0
Upgrades
IT Staff (2-3 engineers for
maintenance) $150,000 $50,000 (Cloud engineers)

Electricity (Cooling & Power) $30,000 $0

Included in Cloud
Security & Compliance $40,000 Subscription
Included in Cloud
Disaster Recovery & Backup $30,000
Subscription
Cloud Subscription Cost
(Compute, Storage, N/A $150,000
Bandwidth, Security, etc.)
Total Cost Per Year $300,000 $200,000
We saved $ 100,000 here in
costs because of cloud
ROA calculations
ROA=Net Income/Total Assets ​×100
Scenario: A company generates $3M in revenue annually, with net income influenced by IT
costs, Net Income: $1M (after IT expenses), Total Assets: $5M (including $650K IT assets)

ROA Calculation for On-Premise IT

Net Income: $1M (after IT expenses)
Total Assets: $5M (including $650K IT assets)

ROA = (1M / 5M) × 100 = 20%

ROA Calculation for Cloud Computing

•On-prem net income = $1.0M, Cloud savings = $0.1M

Net Income: $1.1M (savings from lower IT costs)
•Depreciation :$500k/5 years =$100K per year (Hardware cost of 500K depreciated over 5
years, that cost is saved here and needs to be added back).
•Total Assets: $4.35M (no IT assets)
•ROA = (1.2M / 4.35M) × 100 = 27.6%
Cloud improves ROA by 7.6% because fewer assets are required to generate more profit.
 Cloud Governance Framework

Cloud governance refers to the establishment of proper policies, practices, and

measures to enhance the optimum use, monitoring, and protection of cloud
assets.

 This framework is designed to ensure data security, system

integration and the deployment of cloud computing are properly
managed.

 Since cloud systems are dynamic, involving third-party vendors

or different teams within your business, cloud governance
solutions must be adaptable.

Cloud Governance Benefits

 Improves cloud security issues by having comprehensive rules
and protections in place designed to thwart cybercriminals.

 Improves management of resources so there is no overlap for

 Principles of Cloud Governance
1. Financial Management:

• Monitoring and controlling costs are a crucial aspect of any cloud governance
program. Employing reserved capacity, right-sizing instances, and detecting idle
resources can lead to substantial savings.

• In fact, as per Flexera's data, organizations using public cloud services (like AWS,
Azure, or Google Cloud) often waste about 30% of their cloud spending due to
inefficient usage, over-provisioning, or lack of cost optimization.

• Cloud services often operate on a pay-as-you-go model, which can lead to

unexpected or high costs if not carefully monitored. Effective financial
management helps keep cloud usage aligned with business goals and within the
budget.
How it works:

•Allocation and tracking of cloud costs and data usage.

Principles of Cloud Governance

 Budgeting and forecasting for cloud expenditures

 Cost optimisation strategies and resource utilisation
monitoring

2. Data Management

 As cloud complexity and threat sophistication increase, so does

the need for effective data management techniques. Your cloud
governance policies should clearly define end-to-end data lifecycle
policies, including retention, archiving, and disposal.
 Start by classifying data based on its sensitivity and risk level.
Prioritize the data based on the sensitivity and set policies based
on the risk score.
 Encrypt data using strong keys to protect sensitive data like PII
(personally identifiable information).
 Principles of Cloud Governance

Use appropriate technical safeguards like MFA (multi

factor authentication), access controls, and DLP (Data
Loss Prevention) techniques to ensure data integrity.

3. Risk Management:
 Recognizing potential threats and weaknesses is an integral
component of effective cloud governance. While closely associated
with security, risk management encompasses broader operational
risks, extending beyond security measures.(i.e on of the operational
risk is Downtime & Service Outages: Cloud providers may experience
outages, affecting business operations.)

 Periodic evaluations and ongoing monitoring enable the

identification of unusual patterns indicative of potential attacks,
facilitating prompt actions to address them.
 Principles of Cloud Governance

4. Performance Management:

 This is used to find out how well your cloud system is functioning and identify
places for improvement.

 To meet user expectations and avoid issues like slow performance, downtime, or
service interruptions, which can affect productivity and customer satisfaction.

 Monitoring: Using tools to track performance metrics such as response times,

latency, and uptime.(Uptime refers to the amount of time a system, service, or
cloud infrastructure is available and running without interruptions, Latency refers
to the delay (in milliseconds) between a user request and the system's response.

 Optimization: Adjusting cloud configurations to ensure that performance aligns

with user needs (e.g., improving load balancing, reducing bottlenecks).

 SLAs (Service Level Agreements): Ensuring that cloud providers meet the agreed-
upon performance standards.
Principles of Cloud Governance

[Link] and Configuration Management:

 Asset and configuration management focuses on managing the
cloud infrastructure components (e.g., virtual machines, networks,
databases) and ensuring that they are configured correctly and
consistently to prevent issues and maintain efficiency.

 Inventory management: Keeping track of all cloud resources

(virtual machines, storage, etc.) in a central inventory.

 Configuration management: Using automation tools to ensure

that all cloud resources are configured according to predefined
standards and policies.

 Specifications for determining what to run or deploy

in an environment to support applications
Principles of Cloud Governance

[Link] and Incident Management:

 A strong cloud security strategy is essential for organizations that
utilize cloud platforms to handle their critical workloads. A key
element of this strategy is the shared responsibility model, which
leading cloud service providers such as AWS, Azure, and Google
Cloud adhere to.

 Under this model, providers are responsible for certain security

aspects, while customers are responsible for securing their data,
applications, and access configurations.

 Identity and access management (IAM) tools are crucial for

controlling user access, employing role-based access controls
(RBAC) to align permissions with job roles. Encryption is also a vital
component of cloud security, as it helps to safeguard data integrity
Principles of Cloud Governance

Security and Incident Management:

How it works ?

•Backup and recovery strategies for data and systems.

•Data encryption and key management processes.
•Identity and access management controls.
•Monitoring, auditing, and compliance reporting.
•Application security testing and vulnerability
management.