All right, the cloud security is also a shared
responsibility model along with the cloud administration.
So same concept, you've got your on
premise, your infrastructure, your platform, your software as a service.
Not much different than the slide we just saw a ways back.
All right, similar model, less entries.
Aws, Amazon Web Services, Identity and Access Management.
Aws has a identity as a service function,
enables users to securely control access to AWS services and resources,
allows you to establish access to rules and permissions for specific users.
You're going to be going through a couple
of cool labs to get you familiar with AWS IAM.
Security and Search and Markup Language.
We mentioned this in a previous chapter.
Saml is a markup language for formatting
that's popular for authentication and authorization between communicating
parties, and it's often part of a single sign on solution.
Single sign on is again, you log into one
location, you get access to multiple resources.
Saml is again a language that facilitates
single sign on functionality and federated identities.
Cloud Network Security.
Cloud network security can be achieved
through virtual private clouds, public and private subnets.
A VPC is a secure and independent private
cloud environment that resides within the public cloud.
So again, it's virtualized. You can execute programs, save data, host
applications, everything in a completely contained environment.
Then you also have public and private subnets, which can be part of your VPC.
The VPC will be part of your VPC.
Subnets in a VPC can be public or private.
You can control that level of access.
You're going to be playing around with that also in the labs.
All right, transit gateways.
Transit Gateway is a network routing
solution, establishes and manages communication between an on premise
consumer network and VPCs as a centralized unit.
A VPC endpoint establishes a private connection between
the VPC and other cloud service without access to the Internet, external gateways,
NET Solutions, VPN connections or public addresses.
All right, cloud application security,
specifically rules, processes and policies to administer data exchange between
collaborative cloud platforms, high availability across zones.
The cloud environment for application has high availability if the application
services continue during intentional or unintentional network down times.
A cloud access security broker
is an on premise or hosted cloud solution responsible for enfor security compliance
and governance policies for the cloud applications.
They're placed between the cloud service provider and the service provider.
Azure Security Services do include CASP functionality.
All right, and the next generation secure web gateway.
Cloud based security solution that protects an organization's networkfrom
cloud based threats, malware, infections, and data theft activities,
and allows clients to securely access the cloud services.
All right, well, that's going to wrap up our virtualization and cloud computing.
So again, attack a lot of this stuff.
Configuration wise, not a lot of
experience or stories to tell you on that, but a lot of terminology.
And the cloud environment is here to stay without a doubt.
You're just going to see more and more security procedures, protocols, and
vulnerabilities emerge in the cloud environment.
But we got some cool apps for you on that one.
That's going to wrap up Module 10, virtualization and cloud computing.