Introduction to Cloud Computing and Security
- 1. Intro to CLOUD COMPUTING and CLOUD SECURITY Oran Epelbaum
- 2. ME
- 3. What is Cloud Computing? The use of compute resources provided as a service via the Internet to run applications
- 4. WHAT IS CLOUD COMPUTING GOOD FOR? Focus on Business Pay per Use Change Things Quickly
- 5. WHAT IS CLOUD COMPUTING GOOD FOR? Focus on Business Pay per Use Change Things Quickly
- 6. As a company, would you rather be investing in this?
- 7. Or In this?
- 8. Some things that are NOT your core business Servers Network equipment Databases Storage Arrays Network Bandwidth Redundancy
- 9. WHAT IS CLOUD COMPUTING GOOD FOR? Focus on Business Pay per Use Change Things Quickly
- 10. Users Time Lunch-Ordering App Servers Needed (1 per 300-500 users) Over-provisioning Unused computer resources Monday Tuesday Wednesday Thursday 1000 2000 3000 4000 2 4 6 8 3 5 7 1 9
- 11. WHAT IS CLOUD COMPUTING GOOD FOR? Focus on Business Pay per Use Change Things Quickly
- 12. Things you might want to change QUICKLY Double your storage size Add 1Gbps network capacity Launch a test environment Support users in another continent
- 13. How Does the Cloud Help? 1. Virtualization: everything is software 2. Lease, don’t buy
- 16. enterprise servers in the public cloud 32% enterprise servers elsewhere 68% Are “serious” companies in the cloud yet? % Enterprise workloads in the cloud Source: RightScale 2017 State of the Cloud Report
- 19. Amazon VPC Internet Gateway VPN gatewayRouter VPC NAT gateway Elastic IP Private IP Public IP Network Connectivity
- 20. Amazon VPC Network Security Security Group VPC Subnet Security Group Security Group VPC Subnet Security GroupAmazon API Gateway Elastic Load Balancing Virtual Private Cloud
- 21. Access Control Permissions RoleSecurity Credentials Multi-Factor Authentication Identity & Access Management (IAM)
- 22. Auto Scaling group Availability Zone #1 www.example.com security group security group root volume data volume Elastic Load Balancing Amazon S3 bucket logs Amazon EBS snapshot EC2 instance web app server Simple App Architecture RDS database Availability Zone #2 security group RDS standby
- 23. DEMO
- 24. Are Servers in the Public Cloud Secure?
- 25. VM Escape
- 27. Can bad people get to my data?
- 28. AWS Shared Responsibility Model
- 29. Cloud App Security Practices Encryption Permission s Security groups Private subnets Instance updates Instance rotation User roles Server identity & roles Audit trailBastion server MFA Automated configuration Search for: AWS Security Best Practices NETWORK COMPUTE USERS
- 30. WHAT NEXT? [email protected] 1. Create a cloud account and play with it 2. Find & read the AWS Security Best Practices document ADVANCED TOPICS Cloud storage, CDNs, PaaS, Docker, serverless architecture
Editor's Notes
- #2: The goal of this talk is to introduce the audience to cloud computing, and touch on security of cloud environments. Focus is on IaaS, but we are not stating this explicitly in the slides to avoid terminology overload. The original audience for this deck are students in an IT security education course, without significant prior knowledge about the cloud
- #4: ASK: what is cloud computing? See what the audience knows My own answer: the use of compute resources provided as a service, via the Internet to run applications
- #5: ASK: what is cloud computing good for Again to see what they know already. Bring up the 3 benefits, but don’t drill down into them yet – this is what the next few slides are about
- #11: DESCRIBE the application and its usage pattern ASK how many servers would be needed ideally ASK how many they would provision DESCRIBE the over-provisioning issue
- #14: ASK: how does it help? ASK: do you know what virtualization means? How does it help CALCULATE monthly computer cost
- #25: ASK the audience: what security threats are specific to cloud environments? Write down their answers for reference in the next slides